Privacy policy
ordepoint collects the smallest amount of data needed to complete an Ortel Mobile top-up request. This policy explains exactly what that means in practice.
1. Data controller
The data controller under the General Data Protection Regulation (GDPR) is ordepoint, St.-Paul-Straße 7, 80336 München, Germany. Contact: help@ordepoint.org.
2. Data we collect
- Recharge requests: prepaid number, top-up value, optional e-mail address, optional short note, consent flag.
- Contact messages: name, e-mail, subject, message body.
- Server logs: IP address, browser user-agent, request path and time. Kept for up to 14 days to detect abuse and stored on servers in the European Union.
- Cookies: essential cookies only. See the cookie policy.
3. What we do not collect
- Card numbers, CVVs, expiry dates, bank passwords or TANs — never asked on ordepoint.org.
- ID documents, passport scans, address proofs.
- Third-party tracking pixels or advertising identifiers.
- Location data beyond the coarse country level inferred from the IP address.
4. Why we process this data
To handle your top-up request (Art. 6(1)(b) GDPR — performance of a contract), to reply to messages, to comply with German bookkeeping and tax rules (Art. 6(1)(c) GDPR — legal obligation), and to keep the site up (Art. 6(1)(f) GDPR — legitimate interest in operating a secure service).
5. Who sees the data
Only the small ordepoint team in Munich that handles requests, plus the payment channel and the operator you top up — and only the data needed to complete the transaction. Data is never sold, rented, or shared with marketing brokers.
6. How long we keep it
- Recharge request details: kept for as long as German commercial law requires (currently up to 10 years for invoiced transactions).
- Contact messages that do not lead to a request: kept for up to 12 months, then deleted.
- Server logs: up to 14 days.
- Newsletter e-mail: kept until you unsubscribe (one-click link on every message).
7. Your rights
You have the right to access, correct, delete, restrict or receive a copy of your data, and to object to its processing. Write to help@ordepoint.org — the team replies within 30 days, usually sooner. You may also lodge a complaint with the Bavarian data protection authority (Bayerisches Landesamt für Datenschutzaufsicht).
8. Changes to this policy
If this policy changes, the updated version replaces this page and the date at the top is refreshed. Material changes are notified by e-mail when we hold your address.