§ gdpr / dsgvo

Privacy policy

Data we collect for the ortel recharge online flow, why we collect it, how long we keep it, and the rights you have under the GDPR.

1. Controller

guthabenwerk · Pacellistraße 10, 80333 München-Altstadt-Lehel · [email protected] · phone +49 176 2485 1063 · VAT-registered in Germany.

2. Data we process and why

Order details — the prepaid Ortel Mobile number, the amount, the order id. Purpose: performing the contract with you. Legal basis: Art. 6(1)(b) GDPR.
E-mail address (optional) — only if you provide it, to send the confirmation. Legal basis: Art. 6(1)(b) GDPR.
Payment reference and card last four digits — returned by the checkout provider, kept for accounting and refund handling. Legal basis: Art. 6(1)(c) GDPR (legal obligation).
Server logs — IP address, browser identifier, page requested, timestamp. Kept for 14 days for security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

3. Data we do not process

Full card numbers, CVV or expiry — these are handled only within the PCI-DSS scope of the payment provider. No advertising trackers, no third-party analytics.

4. Processors

Web hosting: EU-based provider under a data-processing agreement.
Payment processing: PCI-DSS compliant provider under a data-processing agreement.
Transactional e-mail: EU-based e-mail delivery service.

5. Retention

Order data is kept for as long as German tax and commercial law requires (up to ten years). Contact-form messages are kept while the case is open; server logs, 14 days; the language and cookie-consent local-storage entries stay until you clear them.

6. Your rights

Access, rectification, deletion, restriction of processing, portability and objection (Articles 15–22 GDPR). Withdraw consent at any time by writing to [email protected]. You may also lodge a complaint with the Bavarian Data Protection Authority (BayLDA).

Last updated: 2026-07-21