Privacy policy

Last updated: 30.09.2026

This privacy policy explains how Hortus Vinum OÜ (trading as diWine, registry code 16588018, address Rehemäe, Truuta village, 67302 Otepää parish, Valga County) collects, uses and protects your personal data when you visit the website diwine.ee, shop in our online store or subscribe to our newsletter. We are the controller of your personal data.

We comply with the General Data Protection Regulation (GDPR) and Estonian and European Union data protection requirements.

1. What data we collect and why

Order data – name, email address, phone number, delivery address or chosen parcel locker, and order contents. We need these to fulfil your order and communicate with you (legal basis: performance of a contract).
Accounting data – invoices and payment information. We keep these under the Accounting Act (legal basis: legal obligation).
Customer account data – if you create an account, we store your contact details, order history and wishlist (legal basis: performance of a contract).
Newsletter data – email address, time of subscription and the personal discount code created for you (legal basis: consent).
Correspondence – if you write to or call us, we keep the communication so we can help you better (legal basis: legitimate interest).
Website usage data – IP address, device and browser information, and data collected through cookies about how you use the site (legal basis: legitimate interest for necessary cookies, otherwise your consent).

diWine never sees or stores payment data (card or bank account details) – these are processed by payment service providers.

2. Age restriction

Our online shop is intended only for persons aged 18 or over. We do not knowingly collect data from minors.

3. Who we share data with

We share data only to the extent necessary to provide our service. Our partners process data on our instructions or as independent controllers:

Payment services – Montonio (bank links, card payments, MobilePay); for Apple Pay and Google Pay payments, WooPayments (Automattic and Stripe).
Delivery – Montonio and carriers Omniva, DPD, SmartPosti and Venipak. We pass on the recipient's name, phone number, email and delivery address or parcel locker.
Web hosting – Zone Media OÜ (zone.ee), whose servers host our website and database.
Newsletter – MailPoet, which we use to send newsletters and the welcome email.
Analytics – Google Analytics (Google Ireland Ltd), only with your consent.
Marketing – Meta Platforms Ireland Ltd (Facebook and Instagram), only with your consent.
Public authorities – where required by law.

We never sell your personal data.

4. Cookies, analytics and marketing

We use cookies to make the shop work (for example, the cart and login). We use analytics and marketing cookies only if you have given your consent in the cookie banner.

Google Analytics helps us understand how visitors use the shop. We use Google Consent Mode: if you do not give consent, no analytics cookies are stored and Google may receive only limited, cookieless signals.
Meta pixel lets us measure the results of Facebook and Instagram ads and show you relevant offers.
Visit statistics – we also collect aggregated visit statistics on our own server (WP Statistics).

You can change your choice at any time using the “Cookie settings” button at the bottom of the page. Read more on the page Cookie policy.

5. Newsletter

When you subscribe to the newsletter, we ask you to confirm your email address (double opt-in). After confirmation, we send a welcome email with a personal discount code. We may collect statistics on email opens and link clicks to improve our emails. You can unsubscribe at any time via the link at the bottom of every email.

6. Transfers outside the European Union

Some service providers (such as Google and Meta) may also process data outside the European Economic Area, including in the United States. In such cases, data protection is ensured under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep data

Order and accounting data – 7 years, as required by the Accounting Act.
Customer account – until the account is deleted.
Newsletter data – until you unsubscribe.
Correspondence – as long as needed to resolve the matter and for possible claims.
Cookies – for the periods stated on the page Cookie policy .

8. How we protect data

The website uses an encrypted connection (SSL).
Only those who need the data for their work have access to it.
We collect only necessary data and delete it when it is no longer needed.

9. Your rights

You have the right to:

access the data concerning you;
have incorrect data corrected;
have your data deleted where we are not required to keep it;
restrict the processing of your data or object to it;
receive your data in a machine-readable format (data portability);
withdraw your consent at any time – this does not affect the lawfulness of earlier processing;
file a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

To exercise your rights, write to info@diwine.ee. We will reply within one month at the latest.

10. Changes

We may update this privacy policy if our services or the law change. The current version is always published on this page together with the date of the last update.

11. Contact

Hortus Vinum OÜ (diWine)
Registry code: 16588018
Address: Rehemäe, Truuta village, 67302 Otepää parish, Valga County
Email: info@diwine.ee
Phone: +372 513 4581