Statement on the Protection of Personal Data Transfer

The protection of personal data is in accordance with the General Data Protection Regulation (GDPR) of the European Parliament and Council No. 2016/679, as well as the implementation of the GDPR.

Monri WSPay, as the executor of credit card authorization and payment, handles personal data as a data processor and processes personal data in accordance with the GDPR of the European Parliament and Council No. 2016/679, as well as the strict rules of PCI DSS L1 regulations on data entry and transfer protection.

Monri WSPay uses a 256-bit encryption SSL certificate and the TLS 1.2 cryptographic protocol as the highest levels of protection for data entry and transfer.

Personal data used for authorization and payment, or for fulfilling obligations from the Contract or based on the Contract, is considered confidential.

For the execution of the Contract (authorization and payment), the following personal data of the customer are required:

• Name and surname
• Email
• Phone
• Address
• City
• Postal code
• Country
• Type of card
• Card number
• Card expiration date
• Card CVV code

Monri WSPay does not process or use these personal data except for the purposes of executing the authorization and payment contract.

Monri WSPay guarantees the fulfillment of all conditions specified by the applicable regulations on the protection of personal data for data processors, especially the undertaking of all necessary technical, organizational, and security measures, as confirmed by the PCI DSS L1 certificate.