1. Purpose and scope

This Data Processing Agreement (“Agreement”) applies where a Mudrider View account holder uses Mudrider View to upload, store, view, download, manage, or delete files and data that may contain personal data of third parties.

Such data may include customer, vehicle, machine, diagnostic, service, workshop, employee, business partner, or other third-party data. The purpose of this Agreement is to define the data protection responsibilities between the account holder and Csúri Elektronics in relation to such uploaded data.

This Agreement supplements the Mudrider View Terms of Use and the Mudrider View Privacy Policy. If there is a conflict concerning processing of uploaded third-party personal data, this Agreement takes precedence for the processor-related processing.

2. Parties and contact

For the purposes of this Agreement:

• the Mudrider View account holder is the controller for customer, vehicle, workshop, employee, business partner, or third-party personal data uploaded into Mudrider View; and
• Csúri Elektronics acts as processor for such uploaded data where it is processed on behalf of the account holder.

Provider identification and legal contact details of Csúri Elektronics are available in the Imprint.

Contact: contact@csurielektronics.com

3. Controller and processor roles

For personal data that the account holder enters into Mudrider View for account registration, login, billing, subscription management, support, security, and service communication, Csúri Elektronics acts as controller.

For personal data that the account holder uploads, stores, or manages in Mudrider View on behalf of their own customers, workshop clients, vehicle owners, employees, business partners, or other third parties, the account holder acts as controller and Csúri Elektronics acts as processor.

The account holder is responsible for ensuring that they have a valid legal basis and the necessary rights to upload and process such data in Mudrider View.

4. Subject matter and duration of processing

The subject matter of the processing is the provision of Mudrider View as a web-based software service for vehicle, workshop, diagnostic, file storage, and sensor data management.

The processing continues for as long as the account holder uses Mudrider View, keeps data stored in Mudrider View, or has an active account, unless the relevant data is deleted earlier or longer storage is required by applicable law.

After termination of the account or service relationship, data will be deleted or made available in accordance with the Mudrider View Terms of Use, the Mudrider View Privacy Policy, this Agreement, and applicable legal obligations.

5. Nature and purpose of processing

Csúri Elektronics processes uploaded data only to provide, operate, secure, maintain, and improve Mudrider View and to perform related service functions.

Processing may include receiving, storing, organising, displaying, retrieving, downloading, deleting, protecting, backing up where applicable, and technically maintaining uploaded data and related metadata.

Purposes include account access, file storage, CSV sensor recording display, vehicle and customer data management, storage limit management, subscription management, security, troubleshooting, service-related notifications, and compliance with legal obligations.

6. Categories of personal data

Depending on the account holder’s use of Mudrider View, processed data may include:

• account-related data such as name, email address, password hash, activation key, preferred language, and login-related data;
• customer or workshop data such as customer name, customer number, notes, and service-related information;
• vehicle or machine data such as licence plate, vehicle identification number, vehicle or machine name, motor number, mileage or operating hours, year, brand/model, and service dates;
• uploaded files such as CSV sensor recordings, PDFs, images, reports, notes, service documents, and other vehicle-related files;
• billing and subscription data such as selected storage plan, billing interval, subscription status, storage limit, Stripe customer ID, and Stripe subscription ID;
• technical and security data such as timestamps, storage usage, upload information, request metadata, error logs, and system logs.

7. Categories of data subjects

The data may relate to account holders, workshop employees, customers of the account holder, vehicle owners, contact persons, business partners, service recipients, or other persons whose data is uploaded or managed by the account holder.

8. Documented instructions

Csúri Elektronics processes customer-uploaded data only according to the documented instructions of the account holder, unless required otherwise by applicable law.

The account holder’s use of Mudrider View, including uploading, storing, viewing, downloading, deleting, managing files, managing vehicle data, and using storage or billing functions, is considered an instruction for the relevant processing.

If Csúri Elektronics believes that an instruction infringes applicable data protection law, Csúri Elektronics may inform the account holder and may suspend the relevant processing where legally or technically necessary.

9. Confidentiality

Csúri Elektronics will ensure that persons authorised to process personal data are committed to confidentiality or are under an appropriate statutory obligation of confidentiality.

Access to uploaded data is limited to what is necessary for operation, support, security, maintenance, troubleshooting, legal compliance, or other legitimate service-related purposes.

10. Security of processing

Csúri Elektronics applies appropriate technical and organisational measures to protect personal data against unauthorised access, accidental or unlawful loss, alteration, disclosure, destruction, or misuse.

These measures are selected taking into account the state of the art, implementation costs, the nature, scope, context, and purposes of processing, and the risk to the rights and freedoms of affected persons.

The account holder is responsible for protecting their login credentials, choosing secure passwords, limiting access to authorised persons, keeping their own devices secure, and ensuring that uploaded files do not contain unnecessary personal data.

Additional technical and organisational measures are listed in Appendix 1 of this Agreement.

11. Subprocessors and service providers

Csúri Elektronics may use service providers necessary to operate Mudrider View, including hosting providers, database providers, file storage providers, email delivery providers, payment providers, security providers, and technical maintenance providers.

The account holder gives general authorisation for the use of subprocessors and service providers needed to provide Mudrider View.

Csúri Elektronics will ensure that subprocessors are bound by appropriate data protection obligations. Where legally required, account holders will be informed about intended material changes concerning subprocessors and will have the opportunity to object where applicable.

Known service providers are listed in Appendix 2 of this Agreement where applicable.

12. International transfers

Where personal data is transferred outside the European Economic Area, Csúri Elektronics will use appropriate safeguards where legally required, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

13. Assistance with data subject requests

Where uploaded customer, vehicle, workshop, or third-party data is processed on behalf of the account holder, the account holder is responsible for responding to requests from data subjects.

Csúri Elektronics will provide reasonable assistance where technically possible, for example by enabling the account holder to access, download, correct, or delete uploaded files and stored data through Mudrider View.

If a data subject contacts Csúri Elektronics directly about data uploaded by an account holder, Csúri Elektronics may direct the person to the relevant account holder where appropriate.

14. Assistance with compliance obligations

Taking into account the nature of processing and the information available to Csúri Elektronics, Csúri Elektronics will provide reasonable assistance to the account holder with compliance obligations relating to security, personal data breaches, data protection impact assessments, and prior consultation where such obligations apply to the account holder.

Such assistance may be limited to information and functionality available within Mudrider View and may be subject to reasonable technical, security, confidentiality, and operational restrictions.

15. Deletion and return of data

The account holder can delete uploaded files through Mudrider View. After deletion, data may remain for a limited time in backups, technical logs, or security records where necessary for technical integrity, security, restoration, legal compliance, or dispute handling.

Upon termination of the account or service, Csúri Elektronics will delete or make available the relevant data in accordance with the Mudrider View Terms of Use, the Privacy Policy, this Agreement, and applicable legal obligations.

Data that must be retained under statutory retention obligations or for the establishment, exercise, or defence of legal claims may be retained for the required period.

16. Personal data breach

If Csúri Elektronics becomes aware of a personal data breach affecting uploaded data processed on behalf of an account holder, Csúri Elektronics will inform the affected account holder without undue delay where legally required.

Csúri Elektronics will provide reasonable information available to it to assist the account holder with the account holder’s own legal obligations relating to the breach.

17. Audit and information rights

Csúri Elektronics will make available information reasonably necessary to demonstrate compliance with this Agreement, taking into account the nature of Mudrider View, the size of the service, confidentiality, security, protection of other users, and the protection of business secrets.

Any audit or inspection must be reasonable, proportionate, scheduled in advance, limited to what is necessary, and carried out in a way that does not endanger security, confidentiality, availability, or the rights of other users.

18. Account holder responsibilities

The account holder must ensure that:

• they are allowed to upload and process customer, vehicle, diagnostic, service, and workshop data in Mudrider View;
• their own customers and affected persons receive any required privacy information;
• only necessary and lawful data is uploaded;
• login credentials are kept secure and account access is limited to authorised persons;
• uploaded data is kept accurate and deleted when no longer required;
• employees or other authorised users use Mudrider View only within the account holder’s lawful instructions;
• they maintain their own backups of important business-critical files and records where necessary.

19. Storage plans and data after cancellation

Mudrider View may provide free and paid storage plans. If a paid storage plan is cancelled, expires, or ends, the account may return to the free storage limit.

If stored data exceeds the free storage limit, uploads may be blocked until the account holder deletes files or upgrades the storage plan again. Files are not automatically deleted only because the storage limit is exceeded.

20. Appendix 1: Technical and organisational measures

Csúri Elektronics applies technical and organisational measures appropriate to the risk of the processing. These measures may include:

• authenticated access to Mudrider View accounts;
• password hashing for stored user passwords;
• server-side validation of registration, login, uploads, storage limits, billing actions, and account actions;
• access restrictions for administrative and maintenance functions where applicable;
• storage limit enforcement for uploaded files;
• user-controlled file upload, download, and deletion functions;
• logging of security-relevant errors and system events where necessary;
• use of Stripe for payment processing without storing full card numbers in Mudrider View;
• reasonable measures to protect systems against unauthorised access, misuse, accidental loss, alteration, and disclosure;
• review and improvement of security measures according to technical and organisational development.

21. Appendix 2: Subprocessors and service providers

Csúri Elektronics may use service providers necessary to operate Mudrider View, including hosting, database, file storage, email delivery, payment, security, maintenance, and infrastructure providers.

Known payment provider: Stripe, for payment and subscription processing.

Additional providers may be added where necessary for the operation, security, maintenance, or improvement of Mudrider View and should be documented where legally required.

22. Contact

Questions about this Data Processing Agreement or data protection in Mudrider View can be sent to:

Csúri Elektronics
Email: contact@csurielektronics.com