Transport

Every page on this domain and on payments.guthabenwerk.org is served over HTTPS with TLS 1.3. HTTP requests are redirected to HTTPS. HSTS is enabled after your first visit. Older cipher suites are turned off at the load balancer.

What we store

• Order id, requested amount and the Ortel Mobile prepaid number you top up.
• The e-mail address you optionally provided for the confirmation.
• The last four digits of the card and the payment provider's reference (returned by the checkout).

What we deliberately do not store

• Full card number, expiry, CVV. These live only in the PCI-DSS scope of the payment provider.
• ID documents, passport data, address of the number holder.
• Contact lists, message contents, browsing history.
• Ad or marketing tracking pixels of any kind.

Where the data sits

Order records live in an EU-hosted database. Backups are encrypted at rest. Access is limited to the small workshop team via named accounts with two-factor logins.

Retention

Order records are kept as long as German tax and commercial law requires (ten years for accounting purposes). Support conversations are kept only for as long as needed to resolve the request, then archived and eventually deleted. You can ask for a copy or deletion of your data at any time via [email protected].

If something looks wrong

If a page looks off, an e-mail seems to come from us but does not, or anything touches your card outside the checkout page, write to [email protected] or call the team in München on +49 176 2485 1063. Refund handling for legitimate double charges is described on the refund page.