This page explains how personal data is processed by DRMZ TARIM GIDA TİCARET LİMİTED ŞİRKETİ (VKN: 3131491865), a company registered in Türkiye ("the Company", "we", "us"). It covers two different things: (1) the data we collect when you visit this website or contact us, and (2) the business data stored inside the CosmoBridge BG software. These are explained separately because our role — and your rights — differ between the two.
For the website and contact data described in Section A, the data controller under the EU General Data Protection Regulation ("GDPR") and, where applicable, Turkish Law No. 6698 ("KVKK") is DRMZ TARIM GIDA TİCARET LİMİTED ŞİRKETİ. You can reach us at info@getcosmobridge.com.
When you fill out the contact or waitlist form, we collect your name, email address, company name, whether you are a business or an accountant, and anything you write in your message. The form is delivered to us through Formspree. We use this data only to answer you and, if you ask to be on the waitlist, to tell you when CosmoBridge BG becomes available. It is not sold or shared for marketing purposes.
This website stores one cookie, cb_lang, which remembers the language you chose. It is not used for tracking.
CosmoBridge BG stores the business data its users enter: company details, invoices and other documents, purchase records and attached scans, stock, payments, payroll data about employees, bookkeeping entries, and the user accounts of the business. It may also store a НАП API key if the business adds one.
Who is responsible for this data: the business using CosmoBridge BG is the data controller for its business data. The Company acts as a data processor, storing and safeguarding this data on the business's behalf and processing it only to provide the Service — not for its own purposes.
Accountants: an accounting office can access a business's data only after the business has approved the connection. Each company's data is kept apart at database level.
Invoice verification: each invoice carries a QR code and a verification code. Anyone holding that code can open the verification page at verify.getcosmobridge.com to confirm the invoice is genuine and unaltered.
Security: a stored НАП API key is encrypted and never shown again after it is saved. The personal identification number entered when exporting a VIES file is used for that export only and is not stored.
Where it is stored: the Service runs on servers operated by Hetzner Online GmbH in its Helsinki, Finland data center, within the European Union.
Backups: encrypted backups are made every night and kept for disaster recovery in Cloudflare R2 storage located in the EU, for up to 90 days, after which they are rotated out.
Emails: account emails such as registration codes and password resets are sent through Brevo, an EU-based email provider.
Payments: payments are handled by Paddle.com Market Ltd as Merchant of Record; we do not receive or store card details.
Retention: business data is kept for as long as the account is active. Your own legal duty to keep accounting records remains with you, so please export what you need before closing an account. To request a full export or deletion, contact us.
Under Articles 15–21 of the GDPR and, where applicable, Article 11 of the KVKK, you have the right to know whether your personal data is processed, and to request access to it, its correction, export, restriction, or deletion. If you are an employee, customer, or supplier of a business that uses CosmoBridge BG, please direct your request to that business first, as it is the controller of that data. You can contact us at info@getcosmobridge.com or via our Contact page. You also have the right to complain to a data protection supervisory authority.
This policy may be updated from time to time. The current version is always published on this page.