Statement on protection and collection of personal data and their use
Hotel Medistone (Astra medići d.o.o.) undertakes to provide protection to customers’ personal data, in such a way that it collects only necessary, basic data about customers/users that are necessary to fulfill our obligations; informs customers about the way the collected data is used, regularly gives customers the opportunity to choose about the use of their data, including the ability to decide whether or not they want their name removed from lists used for marketing campaigns. All user data is strictly kept and is available only to employees who need this data to perform their work. All employees of Hotel Medistone (Astra Medići d.o.o.) and business partners are responsible for respecting the principles of privacy protection.

All payments will be made in Croatian currency. The amount your credit card account will be charged for is obtained through the conversion of the price in other currency into EUR according to the current exchange rate of the Croatian National bank. When charging your credit card, the same amount is converted into your local currency according to the exchange rate of credit card associations. As a result of this conversion there is a possibility of a slight difference from the original price stated in our web site.

Statement on protection of personal data transfer
Protection of personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679-Regulation and Implementation of the General Data Protection Regulation
Monri WSPay, as the executor of credit card authorization and collection, handles personal data in the capacity of processor and personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679 and according to the strict rules of the PCI DSS L1 regulation on data protection and data transmission.
Monri WSPay uses an SSL certificate of 256-bit encryption and TLS 1.2 cryptographic protocol as the highest level of protection when entering and transferring data.
Personal data used for the purpose of authorization and billing, i.e. in the performance of obligations from the Agreement or on the basis of the Agreement, are considered confidential data.
The following personal data of the customer are required for the execution of the Agreement (authorization and billing):
Name and surname
E-mail
Telephone
Address
Place
Zip code
Country
Card type
Card number
Duration of the card
CVV card code
Monri WSPay does not process or use this personal data except for the purposes of executing the authorization contract and billing.
Monri WSPay guarantees the fulfillment of all conditions specified by the current regulations on the protection of personal data for the executors of personal data processing, and in particular the undertaking of all necessary technical, organizational and security measures, and this is especially confirmed by the PCI DSS L1 certificate.

Monri WSPay Usage Statement
Hotel Medistone (Astra Medići d.o.o.) uses Monri WSPay for online payments.
Monri WSPay is a secure system for online payments, real-time payments, credit and debit cards and other payment methods. Monri WSPay provides customers and merchants with secure entry and transfer of entered card data, which is confirmed by the PCI DSS certificate that Monri WSPay has. Monri WSPay uses an SSL certificate of 256-bit encryption and TLS 1.2 cryptographic protocol as the highest level of protection when entering and transferring data.