SightQuest takes the protection of personal data seriously. We process your personal data exclusively within the framework of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), the Austrian Telecommunications Act (TKG) and the Austrian E-Commerce Act. Below we inform you about who we are and about the nature, scope and purpose of the collection and use of data:
Who we are
The controller responsible for data processing is SightQuest e.U. You can reach us by e-mail at info@sight-quest.com, by phone at +43 664 4307025 and by post at Rotenmühlgasse 44/10, 1120 Vienna, Austria.
Collection and processing of data
We process the personal data that you provide to us as a user of the website and/or as a customer, for example in the course of an enquiry, a registration or the conclusion of a contract. The data is processed for the following purposes: performance of the contract (including pre-contractual measures), service guarantee & customer support, our own advertising purposes (sending offers in electronic form) and internal statistics. The legal bases for the processing are
- consent pursuant to Art. 6(1)(a) GDPR in the course of registration
- initiation and performance of a contract pursuant to Art. 6(1)(b) GDPR. We need your data to process your order to your full satisfaction.
- marketing and advertising pursuant to Art. 6(1)(f) GDPR. As a prospective customer and/or customer of our services, we would like to keep you informed about news and offers.
Use and disclosure of personal data
Insofar as you have provided us with personal data as a user of our website and/or as a customer, we use it only to answer your enquiries, to process contracts and for technical administration.
We only pass on or transmit personal data to third parties if this is necessary for the purpose of processing the contract or for billing purposes, or if you, as a user of the website and/or customer, have given your prior consent. As a user of the website and/or customer, you have the right to withdraw any consent you have given at any time with effect for the future.
Stored personal data is deleted if you, as a user of the website and/or customer, withdraw your consent to storage, if your data is no longer required to fulfil the purpose for which it was stored, or if its storage is or becomes inadmissible for other legal reasons. Data required for billing and accounting purposes is not affected by a request for deletion.
Access, rectification, erasure, restriction, data portability, objection, complaint
Upon written request, we will be happy to inform you at any time about the data stored about you. Please send your request by e-mail to info@sight-quest.com or by post to Rotenmühlgasse 44/10, 1120 Vienna, Austria.
If the data we process about you is incorrect, please let us know. We will correct it without delay and inform you accordingly.
If you no longer wish us to process your data, please let us know informally by e-mail at info@sight-quest.com or by post to Rotenmühlgasse 44/10, 1120 Vienna, Austria. We will of course delete your data immediately and inform you of this. Should mandatory legal reasons prevent deletion, we will notify you without delay.
You also have the right to restriction of processing (choice of the purpose of processing), data portability (transfer to another contractual partner), objection and complaint.
You can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, phone +43 1 52 152-0, e-mail: dsb@dsb.gv.at.
Cookies
Our website uses cookies. Cookies are small text files that are sent when a website is visited and temporarily stored on the hard drive of the user of the website and/or customer. When the corresponding server of our website is accessed again by the user of the website and/or customer, the user’s or customer’s browser sends the previously received cookie back to the server. The server can then evaluate the information obtained through this procedure in various ways. Cookies can be used, for example, to control advertisements or to make navigating a website easier. If the user of the website and/or customer wishes to prevent the use of cookies, they can do so locally by changing the settings of the internet browser used on their computer, i.e. the program for opening and displaying web pages (e.g. Microsoft Edge, Mozilla Firefox, Google Chrome, Opera or Safari).
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and of the related consents.
The provision of the personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
Use of the player (device session, game progress, access codes)
To provide the escape games, audio guides and pass products you have purchased, we use a technical device session and local storage in your browser. This is necessary so that the purchased content can be unlocked, your progress saved and use made possible even when the internet connection is briefly interrupted (offline).
In doing so, we process:
- Access or licence code – to verify and unlock access to the respective product.
- Device identifier – to assign your access to your device. It is formed from your IP address and the browser identifier (user agent) as a hash value that cannot be reversed.
- Game progress – solved or completed stops, hints used, the language selection and the answers you have entered in puzzles.
- Activations – the number of devices activated with a code, in order to enforce the activation limit and the team function (playing together as a group). If you use the team function to let further group members join, their devices are recorded in the same way.
- Timestamps – the time the session was created and the time it expires.
For this we use the following strictly necessary cookies and local storage mechanisms:
- sq_sess_<product ID> (cookie) – assigns your device to the purchased session and grants access to the player; stored for 7 days.
- Local storage – stores your game progress in the browser, including for offline use; remains until you delete the website data.
- PHPSESSID (cookie, free demo mode only) – stores the progress of the demo; stored for the duration of the browser session (approx. 1 hour).
These cookies and storage mechanisms are strictly necessary for the operation of the function you have requested and are therefore used without separate consent (Section 165(3) TKG 2021). Your behaviour is not evaluated for advertising or analysis purposes. The session and progress data is also stored on our server (in the database) and linked to the device identifier mentioned above, but only for the period of use of the respective product.
The legal basis is the performance of the contract concluded with you (Art. 6(1)(b) GDPR) and – with regard to enforcing the activation limit and protecting against unauthorised sharing of access codes – our legitimate interest in enforcing our licence terms and preventing misuse (Art. 6(1)(f) GDPR).
Storage period: the device session and game progress are stored for 7 days from redemption and then deleted automatically; the activation data of a code until its validity expires; the demo progress only for the duration of the browser session. Data placed in local storage remains on your device until you delete the website data. This data is not transmitted to third parties; only our hosting provider has access as a processor. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
Partner programme (referral links and partner QR codes)
We work with partner businesses, such as accommodation providers, event organisers or travel portals, that recommend SightQuest to their guests. If you access our website via a partner link or scan a partner QR code, we store the identifier of the referring partner in a cookie. This means that the discount agreed with the partner is automatically credited to your cart, and a subsequent order can be attributed to the partner for billing purposes.
- sq_partner (cookie) – contains only the partner’s identifier (a short form of the business name), no personal data; stored for 14 days. If you scan again, the identifier is overwritten.
The cookie is only set as a result of your own action (opening the partner link or scanning the QR code) and is required to provide the discount you have thereby requested; it is therefore used without separate consent (Section 165(3) TKG 2021). It is only read by our website and is not transmitted to third parties. Your behaviour is not evaluated for advertising or analysis purposes. You can delete the cookie in your browser at any time; the discount then no longer applies.
If you complete an order, we record with the order which partner referred it. The partner receives from us only aggregated billing data (number of referred orders, order values and the commission calculated from them), but no personal data about you – in particular neither your name nor your e-mail address.
The legal basis is the performance of the contract concluded with you, including the granting of the discount (Art. 6(1)(b) GDPR), and our legitimate interest in settling accounts with our partners (Art. 6(1)(f) GDPR). Storage period: the cookie for 14 days from the last time a partner link was opened; the partner attribution of an order for as long as the order data itself (statutory retention periods).