Last updated: 23 October 2026
This Privacy Policy explains how personal data is collected and used when you visit ceowaytogo.com (the “Website”), contact the author or sign up for the free bonus materials for the book How CEOs Get Projects Done Successfully: The 12 Secrets of a Rapid Transformation. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
1. Who is responsible for your data
The controller of your personal data is Iliya Krastev, author of the book and owner of the Website, Sofia, Bulgaria.
Email: iliya@ceowaytogo.com
Phone: +359 886 787 363
2. What data we collect and why
a) When you contact us
When you use the contact form, we collect your first and last name, email address, the subject and your message. We use this data only to reply to you and handle your request. Legal basis: steps taken at your request and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR). The messages are stored in the Website’s database and sent to our mailbox.
b) When you sign up for the free bonus or our mailing list
When you enter your first name and email address in one of the sign-up forms, we add you to our mailing list so we can send you the bonus materials and occasional emails about the book, related resources and our services. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email or by writing to us.
c) Website statistics
With your consent, we use Google Analytics (provided by Google Ireland Limited) to understand how visitors use the Website, for example which pages are visited and how long visits last. Google Analytics uses cookies and is only activated after you accept statistics cookies in the cookie banner. Legal basis: your consent (Art. 6(1)(a) GDPR). You can change your choice at any time through the cookie settings on the Website.
d) Technical data
When you visit the Website, our hosting provider’s servers automatically record technical information such as your IP address, browser type, the pages requested and the date and time of access. This data is needed to deliver the Website securely and to detect abuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
3. Cookies
The Website uses cookies that are necessary for it to work and, only with your consent, cookies for statistics. Details about each cookie and how to change your choice are in our Cookie Policy.
4. Who receives your data
We do not sell your personal data. We share it only with service providers who help us run the Website and who process it on our behalf under a data processing agreement:
- SuperHosting.BG (Bulgaria) – hosting of the Website, its database and our email.
- Mailchimp (The Rocket Science Group LLC, an Intuit company, USA) – sending emails to our mailing list.
- Google (Google Ireland Limited / Google LLC) – website statistics, only with your consent.
The fonts used on the Website are hosted on our own server, so no data is sent to Google when the fonts load.
The Website contains links to Amazon, where you can buy the book, and buttons for sharing on social networks such as Facebook and X. These services only receive data from you if you click the link or button; their own privacy policies then apply.
5. Transfers outside the EU
Mailchimp and Google may process data in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection. Where needed, the transfers are also covered by the European Commission’s Standard Contractual Clauses.
6. How long we keep your data
- Contact form messages: as long as needed to handle your request, and no longer than 2 years after our last communication.
- Mailing list: until you unsubscribe or withdraw your consent.
- Google Analytics data: no longer than 14 months.
- Server logs: according to the hosting provider’s retention periods, usually a few weeks.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to the processing of your data;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
To use any of these rights, write to iliya@ceowaytogo.com. We will reply within one month.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg) or with the data protection authority in the EU country where you live.
8. Security
The Website uses an encrypted HTTPS connection. We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access.
9. Children
The Website is intended for business professionals and is not directed at children under 16. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy when our services or the law change. The current version is always available on this page, with the date of the last update at the top.
