Effective from 12 August 2026
This Privacy Policy describes how your personal data is collected, used and protected when you use the Diney restaurant ordering platform at app.diney.eu (the “Service”) and the Diney website at diney.eu.
1. Data controller
The data controller for the processing described in this policy is:
89 OÜ
Registry code: 12845820
Address: Madara tn 31, 10613 Tallinn, Harju maakond, Estonia
E-mail: support@diney.eu
2. Data we collect
- Account data – name, e-mail address, phone number and language preference when you create an account. For restaurant users we also process the restaurant’s name, location and your role.
- Order data – the items you order, quantities, customisations and notes, the table identifier, and the time and status of your orders.
- Payment data – payment method, payment status and transaction references. Online payments are processed by our payment service providers Montonio and ComplyPay. We do not receive or store your full card details.
- Technical data – IP address, browser type and version, device type and operating system, pages visited and time spent, collected when you use the Service or the website.
3. Purposes and legal bases of processing
- Providing and operating the Service (accounts, orders, payments) – performance of a contract;
- Customer support and service-related notifications, such as order status updates – performance of a contract;
- Improving and developing the Service and analysing usage – legitimate interest;
- Complying with legal obligations, for example accounting requirements – legal obligation;
- Direct marketing – only with your consent, which you can withdraw at any time.
4. Recipients of personal data
We share your data only to the extent necessary and with the following recipients:
- payment service providers (Montonio, ComplyPay) to process payments;
- hosting and infrastructure service providers to store and run the Service;
- e-mail delivery service providers to send notifications;
- accounting service providers, where required for bookkeeping;
- public authorities, where required by law.
Your personal data is processed within the European Union / European Economic Area. If any data is ever transferred outside the EU/EEA, we apply appropriate safeguards as required by the GDPR.
5. Retention of personal data
- Account data is kept until you delete your account or ask us to delete it.
- Order and payment data is kept for up to seven years to comply with accounting legislation.
- Support correspondence is kept as long as necessary to resolve the matter.
- Technical data is kept in anonymised or aggregated form for no longer than necessary for analysis.
We keep your personal data only as long as necessary for the purposes described in this policy or as required by law.
6. Your rights
Under the GDPR you have the right to:
- access your personal data;
- request rectification of inaccurate data;
- request erasure of your data;
- request restriction of processing;
- object to processing based on legitimate interest;
- receive your data in a structured, machine-readable format (data portability);
- withdraw consent at any time, where processing is based on consent.
To exercise your rights, contact us at support@diney.eu. We respond within one month. If you believe we have infringed your rights, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).
7. Security
We apply appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access control and regular software updates. Access to personal data is limited to authorised personnel only.
8. Cookies
- diney.eu – a session cookie that remembers your language choice (ET/EN/RU).
- app.diney.eu – a session cookie that is strictly necessary for login and security.
You can block or delete cookies in your browser settings, but some parts of the Service may then not work correctly.
9. Links to third parties
The Service may contain links to third-party services, such as payment providers. We are not responsible for their privacy practices and encourage you to read their privacy policies.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always published at diney.eu/privacy-policy.
11. Contact
For all questions related to this policy or the processing of your personal data, contact us at support@diney.eu.