Privacy Policy

The short version

This website sets no cookies, stores nothing on your device and measures no audience. No profiles are built. As long as you only read, the site loads nothing from external servers: fonts, images and scripts all come from us. Third-party providers only come into play when you start a video or choose a location to book, and that is described below.

Controller

NeoQuest GmbH, Schulhausstrasse 14, 8002 Zurich, Switzerland
Email: info@neoquest.ch, phone: +41 44 506 58 60

We have not appointed a data protection officer. Swiss law does not require one, and the conditions in Article 37 GDPR are not met: we do not monitor anyone systematically on a large scale and we do not process special categories of data on a large scale. The address above answers questions about data protection.

This policy covers this website and the games. The booking itself is the organiser's responsibility; see the "Booking" section below.

Representative in the European Union

We have no establishment in the European Union and have not appointed a representative under Article 27 GDPR. We rely on the exemption in Article 27(2)(a) GDPR: processing through this website is occasional, involves no special categories of personal data and is unlikely to result in a risk to your rights and freedoms. We review this assessment regularly.

Server logs

When you open the site, your browser transmits technically necessary information that our host records: IP address, time of the request, the address requested, the volume of data transferred, the status code, browser type and operating system. We use these logs solely to run the site, trace faults and fend off attacks. They are not combined with other data and are not analysed to recognise individuals.

Purpose: operating, troubleshooting and securing the website.
Legal basis: our legitimate interest in secure and uninterrupted operation (Article 6(1)(f) GDPR); for Switzerland, the processing principles in Article 6 FADP and our overriding private interest under Article 31 FADP.
Retention: the host states a lower limit of seven days, after which the logs are overwritten. It publishes no fixed upper limit. We have no access to the logs ourselves and keep no copies.
Recipients: Infomaniak Network SA as our processor. We do not pass the logs on beyond that.

Hosting

The website is hosted by Infomaniak Network SA, a Swiss provider. The host processes the log data described above solely on our behalf. The basis is the data processing agreement which, by its own preamble, forms an integral part of Infomaniak's general terms and rests on Article 28 GDPR and Article 9 FADP. Sub-processors are not named individually in it.

If you write to us

This site has no contact form. If you click one of the email links, your own mail programme opens with a prepared message; you are the one who sends it. We then process what you write in order to answer your enquiry.

Purpose: answering your enquiry.
Legal basis: pre-contractual steps and performance of a contract (Article 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Article 6(1)(f) GDPR); for Switzerland, Article 31 FADP.
Retention: for as long as we are dealing with the matter, then within the statutory retention periods.

Storage on your device

This site sets no cookies and stores nothing else on your device either. That is also why no consent banner appears when you open the site: there is nothing to decide.

If you start a video or open the booking panel, the provider concerned may store something on your device. We have no influence over that; it happens only after your click and is described below for both services.

Booking

Bookings are made through an embedded booking panel provided by Quinbook. It loads only when you choose a location. With that click your browser connects to cdn.quinbook.com and api.quinbook.com, transmitting your IP address. Whatever you then enter in the booking panel, that is your name, contact details, date and group size, is processed on the organiser's behalf; payment runs through Stripe.

The events are run, and bookings handled, by the escape GmbH, Löwenstrasse 69, 8001 Zurich. They are the controller for the data you enter in the booking panel. How they handle it is set out in their own privacy policy at theescape.ch/datenschutz.

In short: if your question is about the game, we are the right address. If it is about your booking, the date or what happens on the day, please contact the escape GmbH.

Purpose: handling your booking.
Legal basis: performance of the contract (Article 6(1)(b) GDPR); for Switzerland, Article 31 FADP.
As long as you do not choose a location, none of this is loaded and nothing is transmitted.

Videos

The videos are hosted by Vimeo. On the page you first see only a preview image served from our own server. The player loads only when you click it. With that click your browser connects to player.vimeo.com, transmitting your IP address to Vimeo in the United States. Vimeo may store its own data on your device in the process.

Purpose: playing the video you asked for.
Legal basis: your consent, given by the click (Article 6(1)(a) GDPR).
If you do not click, no video is loaded and nothing is transmitted.

Transfers abroad

Simply reading this site transfers no data abroad. Fonts, images and scripts come from our own server; hosting and email are with a Swiss provider.

A transfer takes place only when you start a video or open a booking panel. Your IP address and the details you enter then go to the provider concerned, and with Vimeo and Stripe also to the United States. The basis is your consent for the videos and performance of the contract for the booking.

Use of artificial intelligence

Some of the images on this site were created by our graphic artists and game designers using artificial intelligence. The games themselves, their stories and their puzzles are the work of people.

No AI system runs on this website: there is no chatbot, no automated decision about your enquiry and no processing of what you write by an AI system. A person reads your enquiry.

Your rights

At any time you have the right to:

• be told whether and what data we process about you, and receive a copy
• have inaccurate data corrected and incomplete data completed
• have your data erased, unless a retention duty prevents it
• have processing restricted
• receive the data you provided in a common, machine-readable format
• object to processing we base on a legitimate interest

A short message to info@neoquest.ch is enough. You do not need to give a reason and it costs you nothing. We reply within one month; if we need longer, we will tell you and say why. So that we do not hand out someone else's data, we may ask for further details to identify you in cases of doubt.

Complaints

If you feel we are handling your data wrongly, please speak to us first. Independently of that, you may lodge a complaint: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern; in the European Union with the supervisory authority of your residence, your place of work or the place of the alleged infringement.

Changes

We update this policy when the processing described here changes. The version published here is the one that applies. This version: 19 August 2026.