Privacy Policy

Effective September 2023 · Pursuant to the revised Swiss Federal Act on Data Protection (nFADP)

1. Data Controller

VirtualExperience Bern GmbH

Maulbeerstrasse 8, 3011 Bern, Schweiz

info@virtualexperience.ch · 031 304 79 75

2. Data Processing Principles

We process personal data only to the extent necessary for the operation of our website and the provision of our services. Processing is based on consent, for the performance of a contract, to fulfil legal obligations, or based on an overriding legitimate interest.

3. Data We Collect

a) Booking data

When you make a booking, we collect your name, e-mail address, phone number, chosen game, date/time and the number of players. This data is required for the performance of the contract.

b) Payment data

Payments are processed via Stripe Inc. Card data is stored exclusively at Stripe and is never processed on our servers. Stripe maintains PCI-DSS compliance. More information: stripe.com/privacy.

c) Voucher data

For voucher purchases, the e-mail addresses of the buyer and, where applicable, the recipient are stored for delivery purposes.

d) Server log data

When you visit our website, technical data is collected automatically: IP address (anonymised), browser type, operating system, referrer URL, date/time of access. This data is used for security and operational stability and is deleted after 30 days.

4. Service Providers

Vercel Inc.

Hosting & infrastructure

USA · Adequate level of protection (DPF-certified)

vercel.com/legal/privacy-policy

Supabase Inc.

Database & file storage

Servers in the EU (Frankfurt) · SOC 2 Type II certified

supabase.com/privacy

Stripe Inc.

Payment processing

USA · PCI-DSS Level 1 · DPF-certified

stripe.com/privacy

Resend Inc.

Transactional e-mails (booking confirmations)

USA · DPF-certified

resend.com/legal/privacy-policy

5. Cookies & Local Storage

We use only technically necessary cookies (e.g. session tokens for the logged-in area). Tracking, advertising or analytics cookies are not used. No consent is required for these cookies.

6. Retention Periods

Data category	Retention period
Booking data	10 years (Swiss CO Art. 962)
Payment records	10 years (tax law)
Server log data	30 days
Voucher data	Until redemption + 3 years
Unredeemed vouchers	5 years from issue

7. Your Rights

Under the nFADP you have the following rights regarding your personal data:

›Right to access the data stored about you
›Right to rectification of inaccurate data
›Right to erasure (unless a statutory retention obligation applies)
›Right to restriction of processing
›Right to data portability in a common electronic format
›Right to object to processing

To exercise your rights, please contact us by e-mail at info@virtualexperience.ch. We will usually respond within 30 days.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. The transmission between your browser and our website is encrypted (TLS/HTTPS). Access to personal data is restricted to authorised staff.

9. Changes to this Policy

We reserve the right to update this privacy policy at any time. The current version is available on this page. In the event of significant changes, we will notify you by e-mail where we have your address.

Last updated: September 2023