PRIVACY POLICY OF "JOURNEY GROUP" LTD

I. GENERAL INFORMATION

„"JOURNEY GROUP" OOD, UIC 200939143, with registered office and management address: Sofia, Krasno Selo residential district, 1 Felix Kanitz Str., 1st floor, apt. 3, hereinafter referred to as the Administrator, processes personal data in accordance with:

● European Parliament Regulation (EU) 2016/679
● Personal Data Protection Act
● Tourism Law
● Applicable Bulgarian legislation

This policy aims to inform Journey Group clients about the way their personal data is collected, processed and stored.

II. WHAT PERSONAL DATA DO WE PROCESS?

1. Identification data

● three names
● Personal Identification Number (when necessary)
● ID card/passport number
● date of birth

2. Contact details

● phone number
● email
● address

3. Contract data

● contract number and date
● travel package
● travel dates
● reservation information
● service value
● payment method

4. Payment details

● bank information
● payment history
● invoices

5. Technical data when visiting the site

● IP address
● device type
● browser
● cookies
● date and time of visit

III. PURPOSES OF PROCESSING

Personal data is processed for:

1. Conclusion and execution of a contract

Preparation of contracts for organized tourist trips.

2. Organization of tourist services

● reservations
● accommodation
● transportation
● insurance
● communication about the trip

3. Financial and accounting services

● issuing invoices
● payment processing
● accounting

4. Legal obligations

Provision of information to competent state authorities on legal grounds.

5. Marketing

Only with explicit consent.

IV. LEGAL BASIS

The processing is carried out on the basis of:

● performance of a contract
● legal obligation
● legitimate interest
● explicit consent

V. DATA RECIPIENTS

Personal data may be provided to:

● hotels and accommodations
● transport companies
● insurance companies
● travel partners
● banks and payment institutions
● accounting and legal consultants
● government authorities when legally required

VI. STORAGE PERIOD

Personal data is stored:

● until the contract is completed
● until the expiration of the statutory accounting periods (up to 10 years)
● until the basis for processing ceases to exist

VII. CONSUMER RIGHTS

Every client has the right to:

● access to your personal data
● correction
● delete
● restriction of processing
● objection
● portability
● complaint to the Personal Data Protection Commission

VIII. SECURITY

„"JOURNEY GROUP" Ltd. applies appropriate technical and organizational measures to protect personal data against:

● unauthorized access
● loss
● illegal modification
● destruction

IX. COOKIES

The website journeygroup.bg uses cookies for:

● normal operation of the site
● traffic analysis
● improving the user experience

X. CONTACT

For questions about personal data:

„"JOURNEY GROUP" Ltd.
Email: booking@journeygroup.bg

XI. UPDATE

The policy may be updated in the event of regulatory or organizational changes.

Last updated: May 2026.