Privacy policy

Liberari GmbH – Challengebox Games
Version: October 2026

1. Introduction
This privacy policy explains how Liberari GmbH (“we”, “us”) processes personal data when you visit challengeboxgames.ch, contact us, book a game or take part in one of our events. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, we also comply with its requirements.

2. Controller
Liberari GmbH
Challengebox Games
Predigerplatz 22
8001 Zurich
Switzerland
Email: contact@challengeboxgames.ch
Phone: +41 (0) 43 321 90 00

You can contact us at any time with questions about data protection or to exercise your rights.

3. Which data we process
We process personal data that we receive directly from you (e.g. enquiries, bookings, participation), that we collect when running our games and operating our website, or that we receive from third parties (e.g. corporate clients, payment providers, partner companies). This includes in particular:
– contact and identification data (name, email, phone number, company)
– booking and contract data (date, location, number of participants, game)
– payment information (we do not store full credit card details)
– participant lists for corporate events
– communication data (emails, contact form messages)
– technical data from website use (IP address, browser, device, pages visited, date and time)
– voluntary information (e.g. team names, pseudonyms)

If you provide us with data about third parties (e.g. team members), please make sure they are informed about this privacy policy.

4. Purposes of processing
We process personal data in particular to:
– respond to enquiries and prepare quotes
– process bookings, payments and invoices
– organise and run our games and events
– communicate with customers and participants
– operate, secure and improve our website and services
– analyse website use in anonymised or pseudonymised form
– measure the success of our online advertising
– send information about our offers, where permitted by law (you can object at any time)
– comply with legal obligations (e.g. retention obligations under commercial and tax law)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)), our legitimate interests in operating and improving our offers (Art. 6(1)(f)) and your consent (Art. 6(1)(a)), e.g. for analytics and advertising cookies.

5. Contact form and email
When you contact us via our contact form or by email, we process the data you provide (e.g. name, company, email, phone, event date, location, number of participants, message) to handle your enquiry and prepare a quote. To protect the form against spam, we use the WordPress plugin WP Armour, which works without cookies and without transferring data to third parties.

6. Online bookings and payments
Public games (e.g. our team battles at Predigerplatz) are booked online via the booking system of Regiondo GmbH, Germany. When you book, the data required for the booking (e.g. name, email, number of tickets) and the payment data are processed by Regiondo and the respective payment service providers (e.g. PayPal, Google Pay, credit card providers). Their own privacy policies apply. Payments on site can be made in cash, via Twint or by credit card. Corporate customers are invoiced after the event.

7. Cookies and consent
Our website uses cookies and similar technologies. Necessary cookies ensure that the website works and is secure. Analytics and marketing cookies are only set with your consent. You can give, adjust or withdraw your consent at any time via the cookie banner (Cookie Compliance by Hu-manity.co). You can also delete or block cookies in your browser settings; some functions may then no longer work properly.

8. Google Analytics and Google Tag Manager
With your consent, we use Google Analytics 4 to understand how visitors use our website (e.g. pages visited, time spent, device, approximate location). IP addresses are not stored in full. We use Google Tag Manager to manage these services; the Tag Manager itself does not store any personal data. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. Further information: Google privacy policy. You can also prevent tracking with the Google Analytics opt-out browser add-on.

9. Google Ads conversion tracking
With your consent, we use Google Ads conversion tracking to measure the success of our ads (e.g. whether an ad click led to an enquiry). Google may use cookies to recognise that you clicked on one of our ads. You can manage personalised advertising in your Google ad settings.

10. Google Maps

On our contact page, we embed a Google Maps map to show the location of our showroom, and on our events page we link to Google Maps. When the map is displayed, Google may process data such as your IP address; Google’s own privacy policy applies. The fonts on our website are hosted locally; no data is transmitted to Google when they are loaded.

11. Links to other websites
Our website contains links to other websites, e.g. to our sister brand Outdoor Escape Games, which is also operated by Liberari GmbH, or to partners. We are not responsible for the data processing of third-party websites.

12. Disclosure and transfer abroad
We only disclose personal data where necessary, in particular to IT and hosting providers, booking and payment service providers, partner companies you have booked services from (e.g. catering) and authorities where required by law. Some service providers (e.g. Google) may process data outside Switzerland, including in the USA. In such cases, we ensure adequate protection, e.g. through the Swiss-US Data Privacy Framework or standard contractual clauses.

13. Retention period
We retain personal data only as long as necessary for the purposes stated above or as required by law. Business documents such as invoices and contracts are retained for 10 years in accordance with Swiss law. Enquiries that do not lead to a booking are generally deleted after 2 years.

14. Data security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, e.g. SSL/TLS encryption of our website and restricted access rights.

15. Your rights
Within the framework of applicable data protection law, you have the right to access, rectify and delete your personal data, to restrict or object to its processing, to withdraw your consent at any time and to receive your data in a commonly used format (data portability). To exercise your rights, please contact us at contact@challengeboxgames.ch. You also have the right to lodge a complaint with the competent supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

16. Changes to this privacy policy
We may amend this privacy policy at any time. The version published on this website applies. See also our terms and conditions and our legal notice.