Data processors (sub-processors)
Last updated:
The Hungarian version prevails. This page lists the processors of the data handled in the ProSzerviz2 service. Workshops use ProSzerviz2 for their own customers' and vehicles' data: for that data the workshop is the controller, Nadovi Alkatrész Forgalmazó Kft. is its processor, and the providers below are sub-processors.
The data of the website's visitors (trial request, newsletter, cookies) is covered by the privacy notice.
List of processors
| Processor | Purpose | Data concerned | Where |
|---|---|---|---|
| DeepSeek (api.deepseek.com) | Reading the registration certificate for vehicle intake (text recognition). | The photo of the registration certificate; the owner's name and address; plate, VIN and vehicle data. | China (third country) |
| Cloudflare | Serving and protecting the service (CDN, proxy), access protection (Access) and the visitor's location for the sign-in log. | IP address, request data, country and city for the sign-in log. | United States and the Cloudflare network |
| E-mail hosting provider (mail.ddhosting.eu) | Delivering the service's e-mails (SMTP): invitations, notifications, mails to customers. | E-mail address and the content of the mail. | As stated by the provider |
| RapidAPI (auto-parts-catalog) | Looking up vehicle and parts data. | Plate, VIN and vehicle data. | United States |
| Nager.Date | Public holidays for the calendar. | Receives no personal data. | Germany |
Systems we run ourselves
SMS notifications are sent by Nadovi Alkatrész Forgalmazó Kft.'s own SMS server (sms-api.proszerviz.eu), the newsletter and transactional mails by its own mailing system. These are not external processors; an SMS contains the phone number and the message.
Transfer to China (DeepSeek)
When a registration certificate is read, the photo and the personal data on it go to the DeepSeek service, which operates in China. According to the European Union, China does not provide an adequate level of data protection, so the transfer may only take place with appropriate safeguards.
Our lawyer is finalising the legal basis and the safeguards of the transfer (such as the European Commission's standard contractual clauses and the related transfer impact assessment); this page will be updated accordingly.
The ProSzerviz2 server deletes the extracted personal fields after 30 days. Data stored by DeepSeek is subject to DeepSeek's own terms.
Changes
Before adding or replacing a processor we notify the workshops and update this page. For questions, write to [email protected].