Please wait

Protection of Confidential Information

Protection of Personal Data and Card Information

The point of sale protects customer data, both personal and card information. The seller does not store credit or debit card data on its own infrastructure or any infrastructure it leases.

Data entry is secured with 256-bit SSL encryption, and the transmission itself is carried out using TLS 1.2 encryption.

Statement on the Protection and Collection of Personal Data and Their Use

The point of sale allows customers to opt out of marketing campaigns and to withhold consent for their personal data to be shared with third parties.

Privacy Statement

The point of sale tickets.stella-croatica.hr is committed to protecting the personal data of customers by collecting only the essential data necessary to fulfill our obligations; informing customers about the use of collected data, regularly offering them the option to choose how their data is used, including whether or not they wish their name to be removed from lists used for marketing campaigns. All user data is strictly protected and accessible only to employees who need this information to perform their job. All employees of tickets.stella-croatica.hr and business partners are responsible for respecting the principles of privacy protection.

Statement on the Protection of Personal Data Transfer

Personal data protection is ensured in accordance with the General Data Protection Regulation (GDPR) of the European Parliament and Council No. 2016/679 and the implementation of the GDPR.

Monri WSPay, as the executor of credit card authorization and billing, processes personal data as a data processor and handles personal data in accordance with the GDPR and the strict rules of the PCI DSS L1 standard for secure data entry and transmission.

Monri WSPay uses a 256-bit SSL certificate and the TLS 1.2 cryptographic protocol as the highest level of protection for data entry and transmission.

Personal data used for authorization and billing, i.e., for the execution of the Contract or based on the Contract, is considered confidential information.

The following personal data of the customer is required for the execution of the Contract (authorization and billing):

  • Full name
  • Email
  • Phone number
  • Address
  • City
  • Postal code
  • Country
  • Card type
  • Card number
  • Card expiration date
  • Card CVV code

Monri WSPay does not process or use this personal data for any purpose other than the execution of the authorization and billing agreement.

Monri WSPay guarantees compliance with all conditions prescribed by applicable personal data protection regulations for data processors, and in particular confirms this through the PCI DSS L1 certification, which confirms the application of all necessary technical, organizational, and security measures.