Privacy Policy

Statement on the protection and collection of personal data and their use

Hotel Medistone (Astra medići d.o.o.) undertakes to provide protection to customers’ personal data, in such a way that it collects only necessary, basic data about customers/users that are necessary to fulfill our obligations; informs customers about the way the collected data is used, regularly gives customers a choice about the use of their data, including the ability to decide whether or not they want their name removed from lists used for marketing campaigns. All user data is strictly kept and is available only to employees who need this data to perform their work. All employees of Hotel Medistone (Astra Medići d.o.o.) and business partners are responsible for respecting the principles of privacy protection.

All payments will be made in Croatian currency. The amount your credit card account will be charged for is obtained through the conversion of the price in other currency into EUR according to the current exchange rate of the Croatian National bank. When charging your credit card, the same amount is converted into your local currency according to the exchange rate of credit card associations. As a result of this conversion there is a possibility of a slight difference from the original price stated in our web site.

Statement on protection of personal data transfer

Protection of personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679-Regulation and Implementation of the General Data Protection Regulation

Monri WSPay, as an executor of credit card authorization and billing, handles personal data in its capacity as a processor and handles personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679 and according to the strict rules of the PCI DSS L1 regulation on data protection and data transmission.

Monri WSPay uses an SSL certificate of 256-bit encryption and TLS 1.2 cryptographic protocol as the highest level of protection during registration and data transfer.

• Personal data used for the purpose of authorization and billing, i.e. in the performance of obligations from the Agreement or based on the Agreement, are considered confidential data.
  The following personal data of the customer are required for the execution of the Agreement (authorization and payment):
  Name and surname
• E-mail
• Phone
• Address
• Place
• Zip code
• State
• Card type
• Card number
• Duration of the card
• CVV card code

Monri WSPay does not process or use this personal data except for the purposes of executing the authorization contract and billing.

Monri WSPay guarantees the fulfillment of all conditions specified by the current regulations on the protection of personal data for the executors of personal data processing, and in particular the taking of all necessary technical, organizational and security measures, and this is especially confirmed by the PCI DSS L1 certificate.

Monri WSPay Usage Statement

Hotel Medistone (Astra Medići d.o.o.) uses Monri WSPay for online payments.

Monri WSPay is a secure system for online payments, real-time payments, credit and debit cards and other payment methods. Monri WSPay provides customers and merchants with secure entry and transfer of entered card data, which is confirmed by the PCI DSS certificate that Monri WSPay has. Monri WSPay uses an SSL certificate of 256-bit encryption and TLS 1.2 cryptographic protocol as the highest level of protection during registration and data transfer.