Statement about Online Payment Security

When conducting payments within the Web Store, an advanced system is employed to securely process payment card information over the internet.

The CorvusPay system ensures the full confidentiality of both card and personal data from the moment the Customer inputs them into the CorvusPay payment form. Payment data is encrypted from the web browser to the issuing bank of the Customer's card. The Web Store never has access to the complete payment card data of the Customer. Moreover, this data remains inaccessible to CorvusPay system personnel. An isolated core autonomously transmits and manages sensitive data, ensuring their utmost security.

The form for entering payment data is secured with the highest-reliability SSL transport encryption. All stored data is additionally protected by encryption, using a cryptographic device certified according to the FIPS 140-2 Level 3 standard. CorvusPay meets all security requirements for online payment set by leading card brands and operates in compliance with the PCI DSS Level 1 standard, the highest security standard in the payment card industry. When paying with cards included in the 3-D Secure program, the bank further confirms the identity of the Customer with a token or password in addition to the card's validity.

Corvus Pay considers all collected information confidential and treats it accordingly. The information is used solely for the purposes for which it is intended. Sensitive data is entirely secure, and their privacy is guaranteed by state-of-the-art protective mechanisms. Only data necessary for conducting business according to prescribed stringent procedures for online payment are collected.

Security controls and operational procedures applied to the infrastructure ensure the immediate reliability of the CorvusPay system. Additionally, by maintaining strict access control, regularly monitoring security, conducting in-depth network vulnerability checks, and systematically implementing information security provisions, the level of system security is continuously maintained and enhanced by protecting the card data of Customers.