Privacy Policy
Updated October 2026 · Pursuant to the revised Swiss Federal Act on Data Protection (nFADP)
1. Data Controller
VirtualExperience Bern GmbH
Maulbeerstrasse 8, 3011 Bern, Schweiz
2. Data Processing Principles
We process personal data only to the extent necessary for the operation of our website and the provision of our services. Processing is based on consent, for the performance of a contract, to fulfil legal obligations, or based on an overriding legitimate interest.
3. Data We Collect
a) Booking data
When you make a booking, we collect your name, e-mail address, phone number, chosen game, date/time and the number of players. This data is required for the performance of the contract.
b) Payment data
Payments are processed via Stripe Inc. Card data is stored exclusively at Stripe and is never processed on our servers. Stripe maintains PCI-DSS compliance. More information: stripe.com/privacy.
c) Voucher data
For voucher purchases, the e-mail addresses of the buyer and, where applicable, the recipient are stored for delivery purposes.
d) Server log data
When you visit our website, technical data is collected automatically: IP address (anonymised), browser type, operating system, referrer URL, date/time of access. This data is used for security and operational stability and is deleted after 30 days.
4. Service Providers
Vercel Inc.
Hosting & infrastructure
USA · Adequate level of protection (DPF-certified)
vercel.com/legal/privacy-policySupabase Inc.
Database & file storage
Servers in the EU (Frankfurt) · SOC 2 Type II certified
supabase.com/privacyResend Inc.
Transactional e-mails (booking confirmations)
USA · DPF-certified
resend.com/legal/privacy-policyMeta Platforms Ireland Limited
Facebook and Instagram ad measurement with consent
Meta Pixel · Processing in the US is possible
facebook.com/privacy/policy/5. Cookies & Local Storage
Necessary cookies and local storage enable login, booking and your booking confirmation. An HTTP-only cookie associates the confirmation with your booking for up to one hour, so booking references and payment parameters are not sent to advertising services in the URL.
If you allow marketing cookies, we also load the Meta Pixel (ID 291385672212173). It measures page views, the start of checkout and confirmed bookings to assess the effectiveness of our Facebook and Instagram ads. Meta receives technical browser data such as IP address, device information and cookie identifiers, event details and, on booking completion, the booking value in CHF. Meta may link this information to an existing Facebook or Instagram account. We do not send names, email addresses, phone numbers, card details or plain booking references and do not use advanced customer matching.
Without your consent, these marketing events are not sent. We store your choice for up to 180 days. A local, pseudonymous event identifier prevents duplicate booking counts in the same browser. You can change or withdraw consent at any time through Cookie settings in the footer. Withdrawal does not undo transmissions that have already occurred. Details of Meta’s processing are available at facebook.com/privacy/policy/.
6. Retention Periods
| Data category | Retention period |
|---|---|
| Booking data | 10 years (Swiss CO Art. 962) |
| Payment records | 10 years (tax law) |
| Server log data | 30 days |
| Voucher data | Until redemption + 3 years |
| Unredeemed vouchers | 5 years from issue |
7. Your Rights
Under the nFADP you have the following rights regarding your personal data:
- ›Right to access the data stored about you
- ›Right to rectification of inaccurate data
- ›Right to erasure (unless a statutory retention obligation applies)
- ›Right to restriction of processing
- ›Right to data portability in a common electronic format
- ›Right to object to processing
To exercise your rights, please contact us by e-mail at info@virtualexperience.ch. We will usually respond within 30 days.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.
8. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. The transmission between your browser and our website is encrypted (TLS/HTTPS). Access to personal data is restricted to authorised staff.
9. Changes to this Policy
We reserve the right to update this privacy policy at any time. The current version is available on this page. In the event of significant changes, we will notify you by e-mail where we have your address.
Last updated: October 2026