- Organizers of the Prize winning game
Apple Inc. and Google Ireland Limited are not participants or sponsors of this Prize winning game.
The „3-day MINI COOPER Cabrio experience" Prize winning game (hereinafter: „Prize winning game") is organized by MOL Limitless Mobility Ltd., headquarters: 1117 Budapest, Dombóvári út 28., company registration number: 01-09-303981, tax number: 10625790-4-4426139223-2-43 (hereinafter: „Organizer").
Other tasks related to the administration of the Prize winning game, as well as certain data processing tasks, are performed by Rewart Korlátolt Felelősségű Társaság (headquarters: 1112 Budapest, Balatoni út 2/A. B Building 1st floor, company registration number: 01-09-892626, tax number: 14182925-2-43, hereinafter: „Administrator").
Detailed rules regarding data management are contained in the Privacy Policy forming Appendix No. 1 to these Prize winning game Rules.
The Administrator is particularly responsible for performing the following tasks:
- Database management and providing the necessary technical background
- Conducting the draw
- Verifying the winner's data, checking eligibility for the prize
- Persons participating in the Prize winning game
- PARTICIPATING PERSONS
All natural persons over the age of 20 who have a valid, approved registration through the MOL Limo application and have an active private account, and who make a valid rental during the validity period of the promotion within the LIMO CARSHARING or RENT A CAR service with any model and use the service in accordance with the contract, automatically participate in the promotion. One customer participates in the draw once, regardless of how many valid rentals they make during the promotional period (hereinafter: „Player").
Additionally, all natural persons who, during the promotional period, register as a new customer through the MOL Limo application by paying the registration fee and whose registration is approved, automatically participate in the promotion (hereinafter: „Player").
A rental meeting these conditions qualifies as the Player's entry (hereinafter: „Entry").
Registration for the MOL LIMO service is possible through the application.
- EXCLUDED PERSONS
Employees of the Organizer or its Affiliates, persons in another employment relationship with them, or external persons provided by contracted partners (e.g., persons provided by a student organization) who perform work closely related to the organization of the Prize winning game may not participate in the Prize winning game. Close relatives as defined in Section 8:1 (1) point 1 of the Hungarian Civil Code of the persons excluded based on the above description may not participate in the Prize winning game.
Senior classification employees of the Organizer or its Affiliates or senior classification persons in another legal relationship, regardless of the organizational unit, may not participate in the Prize winning game.
Employees of the Administrator, its Affiliates, furthermore economic organizations, agencies involved in the organization or administration of the Prize winning game, their owners, senior officers, employees, or persons in another employment relationship with them, and the close relatives as defined in Section 8:1 (1) point 1 of the Hungarian Civil Code of all such persons, may not participate in the Prize winning game.
Affiliate means any company in whose highest decision-making body the Organizer or the Administrator, directly or indirectly, holds more than 50% of the votes, or exercises majority ownership or other control rights stipulated in a separate contract.
- TERMS of the Prize winning game
The Prize winning game runs from June 1, 2026, 00:01 to June 30, 2026, 23:59. Participation in the Prize winning game is only possible with Entries made during this period that comply with these Prize winning game Rules, and only Entries from this period will be entered into the draw of the Prize winning game.
- Registration
A condition for participation in the Prize winning game is registration for the MOL LIMO service through the application.
The MOL LIMO application can be downloaded from the App Store and the Google Play Store the application links are also available on the website https://mollimo.hu/.
By deleting their user account and/or data, the Player can no longer participate in the Prize winning game.
After registering for the MOL LIMO service, Players can modify their personal data in the app. The Player can request the deletion of their profile data at any time through the MOL LIMO Customer Service or in the "My Account" menu of the application.
- LIMO MODELS participating in the Prize winning game
All MOL LIMO model rentals participate in the Prize winning game, whether in the "CARSHARING" or "RENT A CAR" service:
- Dacia Spring
- Kia Picanto
- Suzuki Vitara Hybrid
- Toyota Yaris Hybrid
- Toyota Yaris Cross Hybrid
- Toyota Corolla Cross Hybrid
- Opel Combo Cargo
- Opel Movano
- MINI Cabrio
- Renault Trafic Combi
- Tesla Model3
- Conditions for participating in the Prize winning game
Therefore, only those who meet the following conditions may participate in the Prize winning game:
- They initiate a new registration – in exchange for the registration fee – for the MOL LIMO service through the app, during the Prize winning game period. The registration fee is HUF 2,490, which can only be waived if someone redeems the VANAUTOM code in the application during registration);
- Or they already have a valid, approved registration and start and close at least 1 rental with any model within the MOL LIMO service during the Prize winning game period, whether in the "CARSHARING" or "RENT A CAR" service.
- If the Player starts and closes more than 1 rental during the Prize winning game period, they will still only have 1 chance in the prize draw.
If any of these conditions are met, the Player automatically participates in the Prize winning game.
The Player can request the deletion of their participation in the Prize winning game at any time through MOL LIMO Customer Service. Following this, the Player will no longer participate in the Prize winning game and will forfeit any potential prizes – if their data is no longer available.
By deleting their user account and/or data, the Player can no longer participate in the Prize winning game.
Apart from registering for the MOL LIMO service in exchange for the registration fee, or starting and closing at least 1 rental with their existing registration during the Prize winning game period, the Player has no further tasks; the system automatically records the activity. Only those Players who comply with the provisions of these Prize winning game.
- PRIZES, DRAW, AND NOTIFICATION OF WINNERS
- MaiN PRIZE
At the end of the Prize winning game, 3 (three) prize packages for MOL LIMO rentals will be drawn, which include the following:
A 3-day MINI Cabrio rental, with premium deductible reduction service and 200 included kilometers per day, each valued at HUF 160,000.
The credit worth HUF 160,000 will be credited to the Winner's private profile. The credits can be used for MOL Limo services until December 31, 2026. The use of credits is automatic; the cost of rental(s) made after the crediting will be deducted from the credit balance. If the balance runs out during the rental, the additional cost of the trip will be charged to the bank card registered to the MOL Limo account.
Each Player may participate in the main prize draw with only 1 Entry.
The winning Players are not subject to personal income tax (PIT) and contribution payment obligations in connection with the Prize winning game implemented within the framework of these Prize winning game Rules.
- DRAWING OF THE MAIN PRIZE AND NOTIFICATION OF WINNERS
Acting on behalf of the Organizer, the Administrator will draw a total of 3 (three) main prizes after the conclusion of the Prize winning game, in front of a three-member drawing committee, using an electronic draw program that adheres to the principle of randomness, on July 7, 2026, at 14:00 at the Administrator's headquarters. The draw is not public.
The Organizer reserves the right to change the pre-announced date and/or location of any given draw. The date change will be published by the Organizer by amending the Prize winning game Rules.
Procedure of the draw: Each Player participates in the Prize winning game with 1 valid Entry.
In the main prize draw, the Organizer will draw 3 (three) Main Winners and, for each winner, 5 (five) main prize Reserve Winners.
The draw program selects the Main Winners and the Reserve Winners with the press of a button, in accordance with the principle of randomness.
The draw takes place among all Entries validly recorded during the entire Prize winning game period, not deleted at the time of the draw, and fully complying with the provisions of these Prize winning game Rules.
The Main Winner will be notified after the draw via the contact email address and/or phone number recorded during MOL LIMO registration, via the email address info@mollimo.hu. This email will contain the information necessary to receive the prize. The Main Winner is obliged to provide the requested personal data within 10 days of being informed of their win. If they fail to meet this obligation within the specified deadline, they will lose their entitlement to the prize.
The Main Winner will receive a data confirmation reminder 5 (five) days after the initial winner notification.
The winning Player may also be notified via the MOL LIMO application, through a push message informing them of their win.
The Reserve Winners of the main prize become entitled to the main prize in the order of draw, if the Main Winner or the preceding main prize Reserve Winner fails to comply with the provisions of these Prize winning game Rules for any reason, or does not take over or refuses the prize; or is excluded. The provisions applicable to the Main Winner otherwise apply to the Reserve Winners.
If it is not possible to award the given main prize to its Reserve Winners either, the Organizer will not offer the prize to anyone else, and the given prize will revert to the Organizer.
The Organizer may exclude from the Prize winning game until the delivery of the prize any Player who does not meet any condition set out in the Prize winning game Rules.
The winning Player is obliged to cooperate with the Organizer and/or the Administrator in order to receive the prize.
- EXCLUSION OF THE PLAYER'S ENTRY
The Organizer reserves the right to exclude from the Prize winning game any Player who commits abuse, unfair procedure, or fraud during the Prize winning game.
For example, Players who provide false data or do not meet the conditions of the Prize winning game Rules for any reason may be excluded from the Prize winning game, and their used services will not be taken into account.
From the Prize winning game – based on the Organizer's discretion – those Players may be excluded due to abuse or unfairness who, contrary to the spirit of the Prize winning game , participate in the Prize winning game as a team under one natural person's name or with registration using false data, with the aim of increasing their chances of winning through this deceptive conduct. Such participants include, for example, persons associated for the purpose of participating in draws and other prize winning game s, who coordinate their actions to acquire prizes and combine the performances of several persons under one name, thereby depriving other Players wishing to play fairly of their chance to win, or reducing the winning chances of such Players through their described conduct. Also considered such persons are those who participate in the Prize winning game with false data to unfairly increase their own chances of winning. Participants or Players engaging in the unfair conduct defined in this point are obliged to compensate any damage caused to the Organizer and/or Administrator in connection with the Prize winning game.
The Organizer reserves the right to exclude from all their current and future organized Prize winning game s any Player who, during the Prize winning game, demonstrably tries to gain an advantage by hacking the Prize winning game 's website and/or application, using robot or spam programs, or any other method allowing fraud or manipulation of the Prize winning game process.
The exclusion becomes effective upon the Organizer's unilateral written notification without stating reasons, and the Player is obliged to accept the exclusion.
The Organizer reserves the right to request information from any Player if suspicion of abuse, unfairness, or fraud arises concerning them, to exclude the Player, and to stop the delivery of their prize. Participants or Players engaging in unfair conduct are obliged to compensate any damage caused to the Organizer and/or Administrator in connection with the Prize winning game.
In the event of any dispute concerning the validity of Entries participating in the Prize winning game or matters not regulated in this point of the Prize winning game Rules, the Organizer's decision shall prevail.
In the event of any dispute concerning the validity of participation in the Prize winning game, abuse, or matters not regulated in this point of the Prize winning game Rules, the Organizer's decision shall prevail.
- Reservation of Rights
The Organizer reserves the right to change the terms of these Prize winning game Rules during the Prize winning game.
The Prize winning game may be terminated at any time before the specified end date due to the occurrence of vis major (including, in particular, war, earthquake, catastrophe, epidemic, strike, or similar unexpected event), including the case where the Organizer is unable to ensure the proper conduct of the Prize winning game due to circumstances beyond its control.
The Organizer shall not be liable arising from participation in the Prize winning game, amendment of the Prize winning game Rules, including suspension, interruption, or termination of the Prize winning game; the Organizer excludes its liability for any direct or indirect damages arising from the above, which the Player explicitly acknowledges by participating in the Prize winning game.
The Organizer and/or the Administrator exclude their liability for external attacks and/or malfunctions affecting the https://mollimo.hu/ website (hereinafter: „Website"), the MOL LIMO application, or the servers operating them. Therefore, if due to an attack and/or malfunction affecting the Website, application, server, or the hosting network, Players receive incorrect system messages regarding their prizes, their winner/non-winner status, etc., the Organizer and/or the Administrator assume no liability whatsoever for such cases.
The Organizer and/or the Administrator exclude their liability for malfunctions of the Website and the MOL LIMO application occurring for reasons beyond their control, during which it is unusable or has limited usability, but they shall immediately take all necessary measures to identify the cause of the error as soon as possible and eliminate it if possible.
If, during the Prize winning game, a technical or security problem arises that makes the lawful conduct of the Prize winning game impossible or jeopardizes it, the Organizer reserves the right to suspend or terminate the Prize winning game.
In the event of a system error or maintenance, if the MOL Limo system cannot register a transaction, there is no possibility for subsequent recording.
- Availability of the Prize winning game Rules, Contact
The Prize winning game Rules are available on the website https://mollimo.hu/.
For questions regarding the Prize winning game, or other questions independent of the Prize winning game, please contact the Prize winning game Customer Service at the email address info@mollimo.hu, or the standard rate telephone number +36 1 776 7176, or for data protection questions, such as exercising data subject rights, at the email address dpo@mol.hu.
- Miscellaneous Provisions
The Organizer excludes its liability for defects or deficiencies of the Prizes, unless the exclusion of liability is prohibited by Hungarian law. The winning Player may assert such claim within the legal framework against the provider of the Prize.
The Organizer may publish the names of the winning Players of the Prize winning game on the official social media channels https://www.facebook.com/molLIMObudapestand https://www.instagram.com/molLIMObudapest/in accordance with the Prize winning game Rules and the applicable Data Management Information. During the publication, the name of the winning Player (the initial of the surname and the given name) will appear.
During the publication, the name of the winning Player (the initial of the surname and the given name) will appear.
The Prizes cannot be traded commercially, nor exchanged for cash or other discounts.
These Prize winning game Rules are governed by Hungarian law, and any disputes arising in connection with participation in the Prize winning game fall under the exclusive jurisdiction of the Hungarian courts.
Appendix No. 1: PRIVACY POLICY
Budapest, June 1, 2026
MOL Limitless Mobility Ltd.
The Prize winning game Rules are available on the https://molLIMO.hu/ website.
On matters not regulated below, the Data Controller manages data in connection with the use of MOL LIMO based on the MOL LIMO PRIVACY POLICY.
Name and purpose of data processing |
Legal basis for data processing |
Scope and source of processed data |
Duration of data processing |
Recipient of data transfer |
Data processor and data processing activity |
Organization of the prize game, administration, ensuring participation in the prize game, delivery of prizes to winners, contact |
The Player provides their consent by registering for the MOL LIMO service or by using the service. This consent is revocable. |
All participants and winners:
1. Player's name;
2. Email address |
Until 8 working days following the closure of the prize game, except for the winners' data specified below. |
MOL Nyrt. (1117 Budapest, Dombóvári út 28.), MOL Limo and MOL Nyrt. are considered joint data controllers. |
Rewart Kft. (headquarters: 1112 Budapest, Balatoni út 2/A. B Building 1st floor) – purpose: organization of prize game, contact with winners;
Tukan Agency Kft. (headquarters: 1031 Budapest, Varsa utca 14. 3rd floor door 9) – purpose: creating and supporting the technology for the prize draw;
Hetzner Online GmbH. (headquarters: 91710 Gunzenhausen, Industriestr. 25.) – purpose: hosting services for the prize game website;
VULOG S.A. (The Crown, 21, Avenue Simone Veil, 06200 Nice, France) – provision of ancillary services closely related to data processing, server services;
Economic company contracted by VULOG S.A. for server services: SAS OVH (2 rue Kellermann – 59100 Roubaix – France);
ADYEN B.V. (Simon Carmiggeltstraat 6-50 1011 DJ Amsterdam The Netherlands) – operation of online payment system, provision of ancillary services closely related to data processing, server services;
MOL IT & Digital GBS Kft. (1117 Budapest, Dombóvári út 28.) – provision of ancillary services closely related to data processing, IT services, provision of MOL systems;
MOL GBS Magyarország Kft. (1117 Budapest, Dombóvári út 28.) – provision of ancillary services closely related to data processing, invoicing;
Microsoft Magyarország Kft. – online data storage, cloud services (1031 Budapest, Graphisoft Park 3, 01-09-262313, https://www.microsoft.com/hu-hu/contact.aspx);
*Batch – IMEDIAPP SA (41-43 rue Beaubourg, 75003 Paris) – display of push messages (e.g., changes to Terms & Conditions, Privacy Policy) if the user has consented in the mobile app (https://batch.com/);
*Supercharge Kft. (1075 Budapest, Károly krt. 9.) – provision of ancillary services closely related to data processing: providing registration interface (https://supercharge.io/contact);
Sub-processor used by Supercharge Kft.: Twilio Inc. (San Francisco, California, U.S.) – provision of SMS services to finalize registration (https://www.twilio.com/). |
Publication of winners' data
|
Article 6(1)(f) of the GDPR – legitimate interest of the Data Controller to ensure transparency of the prize game, so that participants and other persons can see who the real winners are throughout the entire duration of the prize game. |
Name of the winning Player (surname initial, first name) |
60 days following the closure of the prize game. |
Meta Ireland Limited (Address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – where the winner's name may appear: https://www.facebook.com/molLIMObudapest, https://www.instagram.com/molLIMObudapest/; Privacy policy: https://www.facebook.com/policy.php, https://privacycenter.instagram.com/policy/version/25238980265745528/; Contact: https://www.facebook.com/help, https://privacycenter.instagram.com/policy/version/25238980265745528/?section_id=13-HowToContactMeta |
Mediator Group Kft. (1117 Budapest, Dombóvári út 25.) |
Documentation of prize delivery (according to point 12 of the Prize Game Rules), fulfillment of accounting obligations |
Fulfillment of legal obligation applicable to the Data Controller (Article 6(1)(c) of the GDPR). Legal obligation based on Sections 168-169 of Act C of 2000 on Accounting. |
1. Name;
2. Email address;
3. Fact of winning;
4. Prize |
8 years following the delivery of the prize. |
|
Rewart Kft. (headquarters: 1112 Budapest, Balatoni út 2/A. B Building 1st floor) – purpose: compiling winner statistics for prize delivery, managing winner data necessary for prize delivery. |
Handling of complaints related to the prize game |
Fulfillment of legal obligation applicable to the Data Controller (Article 6(1)(c) of the GDPR). Legal obligation is prescribed by Section 17/A(7) of Act CLV of 1997 on Consumer Protection. |
1. Name;
2. Postal address or email address;
3. Subject and content of the complaint;
4. Complaint identification number; 5. The person taking the minutes and – except for verbal complaints communicated by phone or other electronic communication service – the signature of the consumer. |
The Data Controller is obliged to keep the minutes taken of the complaint and a copy of the reply for three years based on Section 17/A(7) of Act CLV of 1997 on Consumer Protection, and to present them to supervisory authorities upon request. |
In the case of official inspection, the relevant authority. |
MOL Limitless Mobility Kft. customer service, including colleagues performing tasks under a contractual employment relationship (Prodiák Student Cooperative) |
Data Controller I. MOL Limitless Mobility Korlátolt Felelősségű Társaság (headquarters: 1117 Budapest, Dombóvári út 28., company registration number: 01-09-303981, tax number: 10625790-4-4426139223-2-43, website: https://mollimo.hu/, email: dpo@mol.hu)
Data Controller II. MOL Hungarian Oil and Gas Public Limited Company (headquarters: 1117 Budapest, Dombóvári út 28., phone: +36-1-886-5000, website: www.mol.hu, email: dpo@mol.hu)
Data regarding the Data Controller, processes related to data management activities arising during the use of MOL LIMO, and the rights of the Player regarding data management can also be found in the MOL LIMO Data Protection Information.
Data regarding Data Management not included in the MOL LIMO Data Protection Information, beyond it, relating solely to this Prize winning game:
Additional Data Controllers:
Data Controller III.
Meta Ireland Limited
Address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
Contact: https://www.facebook.com/help
Data Controller I. and Data Controller III. are considered independent data controllers, within which they independently determine the purpose and framework of data management, and are independently responsible for data management. Data Controller II. has a separate data management policy and information regarding its data management processes, which are available at the following page:
Privacy Policy: https://www.facebook.com/policy.php
Contact person(s) for Additional Data Controller(s):
Data Controller III: Contact: https://www.facebook.com/help/contact/540977946302970
Name and contact of the Data Protection Officer(s) at the Additional Data Controller:
Data Controller III: Contact: https://www.facebook.com/help/contact/540977946302970
Name, headquarters, phone number, website, and email address of Data Processor(s) and other data controller recipient(s):
- Rewart Ltd. (headquarters: 1112 Budapest, Balatoni út 2/A. B Building 1st floor), purpose of data processing: administration of the prize winning game
- Tukan Agency Ltd. (headquarters: 1031 Budapest, Varsa street 14. 3rd fl. 9. door), purpose of data processing: creating the draw interface for the prize winning game
- Hetzner Online GmbH. (headquarters: 91710 Gunzenhausen, Industriestr. 25.), purpose of data processing: hosting service for the prize winning game website
- VULOG S.A. (The Crown, 21, Avenue Simone Veil, 06200 Nice, France), provision of ancillary services closely related to data management, server service
- Economic company contracted with VULOG S.A. for providing server service: SAS OVH (2 rue Kellermann - 59100 Roubaix - France)
- ADYEN B.V. (Simon Carmiggeltstraat 6-50 1011 DJ Amsterdam The Netherlands) -- operation of online payment system, provision of ancillary services closely related to data management, server service
- MOL IT & Digital GBS Ltd. (1117 Budapest, Dombóvári út 28.) - provision of ancillary services closely related to data management, IT service, provision of MOL systems.
- MOL GBS Magyarország Ltd. (1117 Budapest, Dombóvári út 28.) - provision of ancillary services closely related to data management, invoicing
- Microsoft Magyarország Ltd., - online data storage, cloud service (1031 Budapest, Graphisoft Park 3, company reg. no.: 01-09-262313, https://www.microsoft.com/hu-hu/contact.aspx)
- T-Systems Zrt. (headquarters: 1117 Budapest, Budafoki út 56., email: TS_ugyfelkapcsolat@t-systems.hu, company reg. no.: 01-10-044852) - operation and development of accounting and billing systems
- Batch -IMEDIAPP SA *(41-43 rue Beaubourg, 75003 Paris) - display of push messages (e.g., amendment of GTC, Data Protection Information), if the user has consented in the mobile application. https://batch.com/*
- *Supercharge Ltd. (1075 Budapest, Károly krt. 9.) --* provision of ancillary services closely related to data management: providing registration interface, https://supercharge.io/contact
- Sub-processor used by Supercharge Ltd.: Twilio Inc. - (San Francisco, California, U.S.) -- Providing SMS service for finalizing registration, https://www.twilio.com/
- Mediator Group Ltd. (1117 Budapest, Dombóvári út 25.) - social media content management, www.mediator.hu
Contact person(s) or Data Protection Officer(s) of the Data Processor(s) and other data controller recipient(s):
Management of special categories of personal data for the purpose defined in this Privacy Policy: does not occur.
Data Controllers do not under any circumstances collect special data, i.e., data revealing racial origin, nationality or ethnicity, political opinion or party affiliation, religious or other philosophical belief, trade-union membership, health status, pathological addiction, sexual life, or criminal record.
Data transfer to a third country
During and under the validity of the Prize winning game, the Data Controller transfers personal data to a third country only in connection with the use of the service, as recorded in the relevant data protection information https://mollimo.hu/hu/adatvedelmi-tajekoztato.
Data management by Data Controller III involves data management in a third country:
Meta Ireland Limited
For providing its services, Meta Ireland may use additional data processors outside the European Union/European Economic Area in connection with operating and maintaining data center infrastructure. In this case, the basis for the onward transfer to the additional data processors is Module 3 of the Standard Contractual Clauses (SCC) as set out in Commission Implementing Decision (EU) 2021/914 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679. The destination countries of the data transfer can be found in the following list: https://www.facebook.com/legal/ads-subprocessors.
Meta Ireland transfers data to Meta Platforms Inc. (address: 1601 Willow Road Menlo Park, CA 94025, California, United States), the basis for which is the "Data Privacy Framework" certification based on the adequacy decision adopted by the EU Commission under Article 45 of GDPR in its Implementing Decision C(2023) 4745 of July 10, 2023.
Further information:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active
Fact of automated decision-making, including profiling, and at least in these cases, understandable information regarding the logic used and the significance and expected consequences of such data management for the data subject: profiling occurs during the use of MOL LIMO, details of which are available in the following Data Protection Information: https://mollimo.hu/hu/adatvedelmi-tajekoztato
Data security measures:
- Information security management Ensuring the confidentiality, integrity and availability of system organizational information through the implementation of policies, processes, process descriptions, organizational structures, software and hardware functions.
- Physical access Ensuring the protection of physical assets containing information of the MOL Group.
- Logical access Ensuring that only persons approved and authorized to use the systems can access data used by companies of the MOL Group.
- Data access Ensuring that only persons authorized to use the systems can access corporate data of the MOL Group.
- Data transfer/storage/deletion Ensuring that unauthorized persons cannot transfer, read, modify or delete corporate data of the MOL Group during data transfer or storage. Furthermore, ensuring the immediate deletion of corporate data of the MOL Group when the purpose of data management ceases.
- Confidentiality and integrity Ensuring the confidential handling and up-to-dateness of corporate data of the MOL Group, and maintaining integrity.
- Availability Ensuring that corporate data of the MOL Group is protected against accidental destruction or loss, and that in the event of events causing these consequences, the affected corporate data of the MOL Group is accessed and restored in time.
- Segregation of data Ensuring that data of companies of the MOL Group is managed separately from data of other customers.
- Incident management In the event of any data protection incident related to corporate data of the MOL Group, the impact of the incident is minimized, and the owners of the corporate data of the MOL Group are notified immediately.
- Audit Ensuring that the data processor regularly tests, examines and evaluates the effectiveness of the technical and organizational measures outlined above.
Your rights related to data management
Your data protection rights and remedies, and their limitations, are detailed in the GDPR (in particular Articles 15, 16, 17, 18, 19, 20, 21, 22, 77, 78, 79 and 82 of the GDPR). You may request information about your data at any time, request the rectification, erasure or restriction of processing of your data at any time, object to processing based on legitimate interests and processing for direct marketing purposes (sending direct marketing messages), and you have the right to data portability. The most important provisions are summarized below. When exercising your rights and enforcing remedies, you may contact any of the Companies.
Right to information:
If the data controller processes personal data concerning you, the data controller is obliged to provide you with information – even without your request – about the most important characteristics of the data processing, such as the purpose, legal basis, duration of the processing, the identity and contact details of the data controller and its representative, the contact details of the data protection officer, the recipients of the personal data (in case of transfer to a third country, indicating the appropriate and suitable safeguards), in case of processing based on legitimate interest, the legitimate interest of the data controller and/or a third party, as well as your rights related to data processing and your remedies (including the right to lodge a complaint with a supervisory authority), furthermore, if you are not the source of the data, the source of the personal data and the categories of personal data concerned, if you do not already have this information. Regarding personal data processed for the purpose of a legitimate interest pursued by the Data Controller or a third party, you are also entitled to request the Data Controller to provide the so-called balancing of interests test, which details why the interests of the Data Controller and the third party take precedence over your interests, rights and freedoms during the given data processing operation, and how and to what extent they limit them. In case of automated decision-making and profiling, the Company also informs you about the logic used, as well as provides understandable information about the significance of such data processing and the expected consequences for you. The Company provides this information by making this information available to you.
Right of access:
You have the right to receive confirmation from the data controller as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and certain information related to the processing, including the purposes of the processing, the categories of personal data concerned, the recipients of the personal data, the (planned) duration of the processing, your rights and remedies (including the right to lodge a complaint with a supervisory authority), as well as information about the source of the data if not collected from you.
Upon your request, the Company will provide you with a copy of the personal data undergoing processing. For any further copies you request, the Company may charge a reasonable fee based on administrative costs. If you submit the request electronically, the information shall be provided in a commonly used electronic format, unless you request otherwise. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
The Company will provide information about the possibility, manner, potential costs and other details of obtaining a copy upon your request.
In case of automated decision-making and profiling, the data subject has access to the following information: the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Right to rectification:
You have the right to obtain from the Company, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure:
You have the right to obtain from the Company the erasure of personal data concerning you without undue delay, and the Company has the obligation to erase personal data concerning you without undue delay under certain conditions. Among other things, the Company is obliged to erase your personal data upon your request if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; if you withdraw your consent on which the processing is based and there is no other legal ground for the processing; or the personal data have been unlawfully processed; or you object to the processing and there are no overriding legitimate grounds for the processing; the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Company is subject; the personal data have been collected in relation to the offer of information society services.
Right to restriction of processing:
You have the right to obtain from the data controller restriction of processing where one of the following applies:\
(a) You contest the accuracy of the personal data, in which case the restriction applies for a period enabling the data controller to verify the accuracy of the personal data;
(b) The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(c) The data controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
(d) You have objected to the processing pending the verification whether the legitimate grounds of the data controller override your legitimate grounds.
Where processing has been restricted under the above, such personal data shall, with the exception of storage, only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been lifted upon your request, the Company will inform you in advance.
Right to data portability:
You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the Company to which the personal data have been provided, if:
(a) the processing is based on your consent or on a contract (to which you are a party); and
(b) the processing is carried out by automated means.
In exercising your right to data portability, you have the right to have the personal data transmitted directly from one data controller to another, where technically feasible.
The right to data portability shall not adversely affect the provisions on the right to erasure, and shall not adversely affect the rights and freedoms of others.
Right to object:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data based on the Company's legitimate interest. In that case, the Company may no longer process the personal data unless the Company demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
The Player can indicate their wish to exercise their right to object in the Game via customer service (info@mollimo.hu). Subsequently, their name will no longer be displayed publicly.
Framework for exercising rights:
The Data Controller is obliged to do everything to ensure that the processing of personal data complies with legal requirements. If the Player becomes aware of a circumstance indicating a breach thereof, they may report it during the Prize winning game at the email address info@mollimo.hu, as well as to the Data Controller's data protection officer at dpo@mol.hu.
The data controller shall provide information on action taken on your request related to the rights listed above without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, considering the complexity and number of the requests. The Company shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay. If you submitted the request electronically, the information shall be provided by electronic means where possible, unless you request otherwise.
If the data controller does not take action on your request, it shall inform you without delay and at the latest within one month of receipt of the request of the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority (in Hungary, the National Authority for Data Protection and Freedom of Information – "NAIH") and seeking a judicial remedy.
Contact details of NAIH: 1055 Budapest, Falk Miksa utca 9-11., mailing address: 1373 Budapest, Pf. 9., Tel: +36 1 391 1400, +36 (30) 683-5969 or +36 (30) 549-6838, fax: +36-1-391-1410, email: ugyfelszolgalat@naih.hu, Website: http://naih.hu/
The above information shall be provided by the Company in writing or by other means – including, where appropriate, electronic means. Upon your request, information may be provided orally, provided that your identity is proven by other means. Upon your request, the information may be provided verbally, provided your identity is verified by other means.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority – in particular in the Member State of your habitual residence, place of work or place of the alleged infringement – if you consider that the processing of personal data relating to you infringes the GDPR. Information about the contact details of supervisory authorities within the EU can be found here: https://edpb.europa.eu/about-edpb/board/members_en. You have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning you. You also have the right to an effective judicial remedy if the competent supervisory authority does not handle the complaint or does not inform you of the procedural developments or the outcome of the complaint within three months. Proceedings against a supervisory authority shall be brought before the courts of the Member State where the supervisory authority is established.
Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority, you have the right to an effective judicial remedy if you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data not complying with the GDPR. Proceedings against the Company or its data controller or data processor partner shall be brought before the courts of the Member State where the Company or the data controller or data processor has an establishment. Such proceedings may also be brought before the courts of the Member State where you have your habitual residence.
Such lawsuit in Hungary falls under the competence of the tribunal. Information on the territorial jurisdiction of courts can be found at the following website: https://birosag.hu/birosag-kereso.
The court may oblige the data controller to respect your objection by providing information, rectifying, blocking or erasing the data in question, or annulling the decision made with the help of automated data processing systems. The court may order the publication of its decision, identifying the data controller's identification data or other data controllers and the infringement committed.
The data controller concerned is liable for any damage caused to you by unlawful data processing or breach of data security regulations. If the data controller infringes your personality rights through unlawful data processing or breach of data security regulations, you are entitled to claim damages from the data controller. The data controller may be exempted from liability for damages or compensation if it proves that the damage or infringement of personality rights was caused by unavoidable reasons beyond its control.
No damages or compensation are payable if the damage or infringement of personality rights was caused by your intentional or negligent conduct.
Further information regarding data management can be found in the MOL LIMO Data Protection Information.
Budapest, June 1, 2026
Data Controller
