Privacy Policy

1. Who is responsible?

AdventureRooms Zurich GmbH, Weinbergstrasse 68, 8006 Zürich, Switzerland (UID CHE-498.844.331) is responsible for processing your personal data on this website and at our games. Please send questions about data protection to datenschutz@adventurerooms.ch or by post to this address.

This Privacy Policy is based on the Swiss Federal Act on Data Protection (FADP). It applies to the website zurich.adventurerooms.ch, to bookings, vouchers and enquiries, and to visits to our games.

2. What data we process

Booking, reservation and enquiry: name, email address, phone number, the game you want, date, number of people and your message. For companies, associations and schools, also the name of the organisation and the billing details.

Payment: The deposit by credit card is handled by the payment service Stripe. We do not receive the full card details. On site, you pay in cash, with TWINT, Maestro or credit card.

Vouchers: When you buy an online voucher, name, email address and payment details, and for the voucher with puzzle box also the delivery address.

Visiting the website: Technical data such as IP address, date and time, pages accessed, browser and operating system. This data arises from operating the website (see sections 4 and 5).

During the game on site: During the game, the gamemaster accompanies the group in real time via video cameras. The images are neither stored nor transmitted to other screens nor used for any other purpose. After the game, our gamemasters take a group photo on a voluntary basis. It is only published on our website, on Facebook or on Instagram if everyone in the photo agrees (in the case of children, their parents or the accompanying person). If you would like a published photo to be removed, write to us at datenschutz@adventurerooms.ch.

3. What we use the data for

We process your data in order to handle bookings, reservations and enquiries, to prepare and run games, to settle payments and vouchers, to communicate with you, to prevent misuse and no-shows, to fulfil legal obligations, to measure our advertising and to improve our website and our offer.

Newsletter: If you sign up for the mailing list in the contact form, we store your email address and send you news about our games. Every email contains a link to unsubscribe.

If you have made a booking with us or bought a voucher, we will occasionally inform you by email about similar offers. You can object to this at any time; a short message to zurich@adventurerooms.ch is enough.

We do not sell your personal data.

4. Website and services used

Squarespace: Our website runs on the Squarespace platform (Squarespace Ireland Limited, Ireland, and Squarespace Inc., USA). Squarespace stores the content, processes forms and the shop, sends our newsletter (Squarespace Email Campaigns) and records technical data for the operation and security of the website. Squarespace sets cookies that are necessary for operation, for example for the shopping basket and to protect the forms, and cookies for visitor statistics (Squarespace Analytics). This lets us see how many people visit our pages and which pages they access. Squarespace loads the fonts of the website via the Adobe Fonts service.

Google reCAPTCHA: Our forms are protected against misuse by automated programs with Google reCAPTCHA. In the process, technical data is transmitted to Google.

Google Ads: We advertise with Google Ads. For this purpose, the Google Ads tag is embedded on all pages. Google uses it to set cookies and receives technical data such as the IP address in order to measure whether an ad has led to a booking. Google (Google Ireland Limited, Ireland, and Google LLC, USA) processes this data as an independent controller. You can switch off personalised advertising in Google's “My Ad Center”.

Booking system: Online booking runs via the booking system booking.adventurerooms.ch, which an external partner operates for us. Our Google Ads tag and a Google Analytics tag are embedded there in order to measure bookings.

Stripe: The deposit by credit card is processed via the payment service Stripe (Stripe Payments Europe Limited, Ireland). Stripe processes the payment data to handle the payment and also for its own purposes, such as fraud prevention and legal obligations, in accordance with its own privacy policy.

Gift Up: We sell online vouchers via the Gift Up service (Koan Adventures Ltd, United Kingdom). Gift Up processes the data on our behalf and may also process it in Canada and the USA.

Shop: You order the voucher with puzzle box in the Squarespace shop. Payment is handled via the payment services of the shop, and we send the puzzle box by post.

YouTube and Google Maps: Videos from YouTube (via youtube-nocookie.com) and the map from Google Maps only load when you click on them. Only then is data transmitted to Google.

Zürcher Weihnachtsallee: On the Christmas Market Missions page, the logo and a video of the Zürcher Weihnachtsallee load directly from its website at Wix (Wix.com Ltd., Israel) as soon as you scroll to this section. Wix then receives your IP address and technical data about your browser.

Facebook and Instagram: Our website only contains links to our pages on Facebook and Instagram. Data is only transmitted when you click on a link.

5. Cookies

Cookies are small files that your browser stores. On this website, Squarespace (operation, security and visitor statistics), Google reCAPTCHA (protection of the forms) and Google Ads (measuring our advertising) set cookies. YouTube and Google Maps only set cookies when you click on a video or the map. You can delete or block cookies in your browser at any time. Without the necessary cookies, forms and the shop may not work.

6. Disclosure to third parties

We only pass on your data where this is necessary for the booking, payment, shipping and running of the game, or where the law requires it. Recipients are the operator of our booking system, payment services, our website platform Squarespace, Google, Gift Up, the postal service for shipping the puzzle box and authorities where we are obliged to do so. Service providers who process data on our behalf may only use it for our purposes.

7. Disclosure abroad

In this context, personal data is disclosed to the following countries: Ireland and other countries of the EU and the EEA, the United Kingdom, Israel, Canada and the USA. For these countries, the Swiss Federal Council recognises an adequate level of data protection (Annex 1 of the Data Protection Ordinance). For the USA, this only applies to companies certified under the Swiss-U.S. Data Privacy Framework, such as Squarespace, Stripe and Google. Where this is not the case, we rely on the standard contractual clauses recognised by the FDPIC or on an exception under Art. 17 FADP, for example if the disclosure is necessary to process your booking or you have given your consent, for instance by clicking on a video.

8. How long we keep the data

We only keep personal data for as long as is necessary for the purpose or as required by legal obligations. We keep accounting records such as invoices for the statutory period of ten years.

9. Security

The website is encrypted (TLS). Only employees who need your data for their work have access to it.

10. Your rights

You can request information about your personal data at any time, have incorrect data corrected and have data deleted, provided there is no legal obligation to retain it. You can object to the processing and request your data in a common format. You can withdraw your consent at any time, for example for the publication of a group photo. To do so, write to us at datenschutz@adventurerooms.ch. For a request for information, we may need proof of your identity, and we usually respond within 30 days. You can also assert your claims in court or file a report with the Federal Data Protection and Information Commissioner (FDPIC).

Insofar as the EU General Data Protection Regulation applies to you, we base the processing on the performance of a contract, on legal obligations, on our legitimate interest in secure operation and, where necessary, on your consent. In that case, you also have the right to request the restriction of processing and to lodge a complaint with a data protection authority in the EU.

11. Changes

We may amend this Privacy Policy, for example if we use new services. The version published on this page at any given time applies.

Last updated: 5 November 2026, AdventureRooms Zurich GmbH, Weinbergstrasse 68, 8006 Zürich