Privacy Policy

Status: May 2026 · Last updated: 24 May 2026

The German version of this Privacy Policy is authoritative; in case of discrepancies between the language versions, the German version prevails.

1. Data Controller

AurDvin GmbH
Hofwiesenstrasse 303
8050 Zürich
Switzerland

UID: CHE-244.525.390
E-mail: info@aurdvin.ch
Tel: +41 77 281 17 03

2. Principles of Data Processing

We process your personal data in accordance with the revised Swiss Federal Act on Data Protection (revFADP, SR 235.1) and the Data Protection Ordinance (DPO). We collect only the data necessary for the respective processing purposes (data minimisation).

3. Personal Data Processed and Purposes

3.1 Orders and Customer Relationships

When you place an order with us, we process:

First and last name
Billing and delivery address
E-mail address
Telephone number (optional)
Payment information (processed by the payment service provider)
Order history and proof of age (date of birth is requested for verification, not stored)

Purpose: performance of the contract (sales contract, delivery, invoicing, warranty, statutory age verification)
Legal basis: performance of the contract (Art. 31 para. 2 lit. a revFADP)
Retention: 10 years (statutory bookkeeping obligation)

3.2 Newsletter and Marketing Communications

When you subscribe to our newsletter, we process:

E-mail address
First name (optional)
Subscription date and status
Bestätigung «18 Jahre oder älter» (Jugendschutz)
As proof of your consent: the time (date/time) and IP address of the sign-up as well as of the confirmation (double opt-in)
Version of the consent text accepted

Sign-up procedure (double opt-in): After signing up, you will receive a confirmation e-mail; your subscription is only activated once you click the confirmation link.

Purpose: sending news, offers and wine recommendations, as well as proof of your consent (evidence preservation)
Legal basis: consent (Art. 6 para. 6 in conjunction with Art. 31 para. 1 revFADP); for e-mail advertising, Art. 3 para. 1 lit. o UCA
Retention: until consent is withdrawn; the proof of consent (including IP address) is deleted no later than 6 months after withdrawal/unsubscription
Note: You may unsubscribe from the newsletter at any time (unsubscribe link in every e-mail).

3.3 Contact Form

When you contact us via the contact form, we process:

Name, e-mail, telephone (if provided)
Content of your enquiry

Purpose: handling your enquiry
Legal basis: performance of the contract / legitimate interest
Retention: 2 years after the enquiry has been dealt with

3.4 VinoLog Data (Wine Reviews and Preferences)

If you use VinoLog features:

Wine reviews and comments
Wine preferences and wishlist

Purpose: personalised wine recommendations
Legal basis: performance of the contract / consent
Retention: until the account is deleted

3.5 Technical Usage Data (Website)

On each visit to our website, the following data is collected automatically:

IP address (anonymised after 24 hours)
Browser type and version
Operating system
Pages visited and time spent
Referrer URL

Purpose: technical operation, security; usage analysis only with your consent via the cookie banner
Legal basis: legitimate interest (technical operation); consent (analytics cookies)

3.6 Review and Service E-mail after Purchase

After an order has been completed, we use the contact details collected during the order to ask you by e-mail to review the wines you have purchased and to provide you with accompanying service information about the goods delivered. For this purpose, we send at most one review e-mail with a single reminder per order.

E-mail address and name
Reference to the specific order and the items purchased

Purpose: service communication regarding the goods delivered, as well as obtaining a product review of the wine just purchased
Legal basis: proportionate, purpose-bound processing within the scope of the existing customer relationship (revFADP Art. 6); no separate consent is required for this. The admissibility of this e-mail for our own, similar goods without prior consent is based on Art. 3 para. 1 lit. o UCA (so-called soft opt-in); this is why we inform you of the option to opt out as early as the order stage.
Retention: dispatch and unsubscribe log until 6 months after the last review e-mail; following an objection, we retain only the information necessary for permanent suppression.

Your right to object and unsubscribe: You may object to this use of your data at any time and free of charge — via the unsubscribe link in every review e-mail or informally at info@aurdvin.ch. Following an objection, you will receive no further review e-mails.

Distinction from the newsletter: This review/service e-mail is not part of our newsletter (section 3.2) and does not require a newsletter subscription. It is managed separately and granularly: unsubscribing from the review e-mails leaves any newsletter subscription unaffected, and vice versa. This e-mail does not require a separate (double) opt-in under the Telecommunications Act; nor is it bundled into the newsletter consent.

Link in the review e-mail: The review link may pass through a short redirect address on aurdvin.ch. In doing so, we do not create any personal click profile; any data captured is limited to a data-minimised, aggregated reach measurement.

4. Recipients and Third Parties

Your data is transmitted to the following recipients:

Recipient	Purpose	Place
Odoo S.A.	Operation of the e-commerce platform	Belgium / EU
Payment service provider	Payment processing	EU / variable
Swiss Post Ltd	Parcel delivery, age verification	Switzerland
E-mail service provider	Dispatch of newsletter, transactional and review/service e-mails	EU

All processors are contractually obliged to comply with data protection regulations.

5. Transfer of Data Abroad

Odoo S.A. has its registered office in Belgium (EU) and is subject to the GDPR. Transfers from Switzerland to the EU are permissible on the basis of the adequacy decision. For US service providers, the transfer is carried out on the basis of Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

6. Rights of Data Subjects

Under the revFADP (Art. 25 et seq.), you have the following rights:

Right of access: You may request information about the data we have stored about you at any time.
Right to rectification: You may have inaccurate data corrected.
Right to erasure: You may request the erasure of your data (insofar as no statutory retention obligation applies).
Right to restriction: You may request the restriction of processing.
Data portability: You may receive your data in a common, machine-readable format.
Right to object: You may object to processing based on legitimate interests, as well as to the use of your data for review/service e-mails (section 3.6), at any time and free of charge.
Withdrawal of consent: You may withdraw any consent given at any time with effect for the future.

Contact for data protection enquiries:
info@aurdvin.ch
We will process your request within 30 days.

7. Right to Lodge a Complaint with the FDPIC

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch

8. Data Security

We employ technical and organisational measures to protect your data against unauthorised access, loss or misuse. These include SSL/TLS encryption, access control and regular security reviews.

9. Cookies

Our website uses cookies (small text files on your device).

9.1 Necessary Cookies (always active)

Session cookie (shopping cart, login), CSRF protection cookie. These cookies are essential for technical operation and do not require consent.

9.2 Analytics Cookies (with your consent)

Odoo Website Analytics, anonymised page-view statistics. Only activated after your consent via the cookie banner.

9.3 Marketing Cookies (with your consent)

Cookies for personalised advertising and campaign measurement. Only activated after your consent via the cookie banner.

Adjust consent: You may adjust your cookie settings at any time by clearing your browser's local storage or upon revisiting the website.

9.4 Affiliate / Referral Cookie

If you access our website via a personal referral link from one of our partners (address of the form /ref/), we set the cookie aur_ref. It stores only the partner's referral code so that we can attribute any resulting order to the referring partner (affiliate / referral accounting).


                                    Retention period: 30 days. The cookie is protected against being read by scripts (HttpOnly) and is not used for cross-site advertising or profiling. It is only set if you actually arrive via a valid referral link — not on an ordinary visit to the website.
                                    The legal basis is our legitimate interest in correctly accounting with our referral partners, as well as the contractual relationship with the relevant partner (Art. 31 revFADP). You may delete the cookie at any time via the cookie settings or your browser's local storage.

                                    10. Age Verification
                                    
                                    Wine is an alcoholic foodstuff; as a wine merchant, we are legally obliged to prevent its supply to minors (Foodstuffs Act FSA Art. 14 in conjunction with the Ordinance on Foodstuffs and Utility Articles FUO; statutory minimum supply age for wine: 16 years). AurDvin voluntarily supplies alcoholic beverages only from the age of 18. Before the payment step, we carry out a server-side age check: your date of birth is requested and used exclusively for a one-off age calculation, but is not stored. As proof of the check, only a log entry without the date of birth is kept (check result, minimum age checked, truncated IP address). On delivery by Swiss Post, an additional physical age check is carried out (proof of identity required).

                                    11. Amendments to this Privacy Policy
                                    
                                        We reserve the right to amend this Privacy Policy if legal requirements or our processing activities change. The current version is always available on this page. We notify registered users of material changes by e-mail.
                                    
                                    
                                        Status of this policy: 24 May 2026