top of page


Privacy Policy

Last updated: 21 August 2025


1) Who we are (Data Controller)

 

​PlayVR Funpark GmbH (“PlayVR”, “we”, “us”, “our”) operates a location-based virtual reality entertainment venue and related websites.

  • Legal entity: PlayVR Funpark GmbH

  • Registered address: Albert-Schweitzer-Gasse 6/Top 203+205, 1140 Vienna, Austria

  • ​Email (privacy): office@playvr.at​

 

This Policy explains how we collect, use, share, retain, secure, and transfer personal data when you:

  • visit our websites,

  • enter our venue,

  • use our VR experiences, or

  • otherwise interact with us.


2) Scope

​​​

This Policy applies to:

  • Online: playvr.at (and subdomains), booking widgets, customer portals, and support channels.

  • On-site: POS, check-in tablets, guest Wi-Fi, VR gameplay/simulator systems, event media.

  • Communications: email/SMS/phone/chat, surveys, promotions, and competitions.

​​​

Where a PlayVR-branded event is hosted by a partner venue (now or in the future), that venue may act as an independent controller for its own operations (e.g., local bookings). PlayVR may act as a processor for the software we provide to that venue. Their privacy notices will also apply.​​


3) What we collect & why

​​

At PlayVR, we minimise data collection. We only collect what is necessary to provide a safe and enjoyable experience:​

​

 
Website cookies

  • Our website uses a small number of cookies to function securely and reliably.These include essential cookies (for security and system performance) and limited analytics cookies (to understand how visitors use our site).

  • We use cookies that are necessary for the provision of the website (essential cookies) on the basis of Article 6 (1) (b) GDPR (“fulfilment of a contract”). Analytics cookies are only used based on Article 6 (1) (a) GDPR (“consent”).

  • For details, see our Cookie Policy.

​


In-venue payments

​​​​

  • When you pay at our cashier, the payment system processes your transaction securely.

  • We do not collect or store your personal details beyond what is required for the receipt.

  • We process the transaction data on the basis of Article 6 (1) (b) GDPR (“fulfilment of a contract”).

​

​

​


Customer feedback

​​​​​​

  • We may invite you to share your experience through a short survey in our shop or by leaving a Google Review.

  • Surveys are anonymous. Google Reviews are linked to your own Google account.

  • We process your customer feedback on the basis of Article 6 (1) (f) GDPR (“legitimate interest”).

​


Simulator usage data

​​​​​​

  • Our systems automatically record how often each simulator and experience is used.

  • This helps us maintain our equipment, improve services, and understand which games are most popular.

  • The data is collected in aggregate and is never linked to individual visitors.

​

​​

Die Daten werden ausschließlich aggregiert erfasst und niemals einzelnen Besuchern zugeordnet.​​


4) Lawful bases (GDPR Art. 6)

​​

We process personal data only where there is a valid legal basis under the GDPR:​

​

  • Contract (Art. 6(1)(b))

    • To provide the service you request — for example, processing your payment so you can play our simulators.
       

  • Legal obligation (Art. 6(1)(c))

    • To meet requirements under Austrian law, such as tax and accounting rules.
       

  • Legitimate interests (Art. 6(1)(f))

    • To keep our systems secure, maintain our equipment, and improve our services (e.g., monitoring simulator usage).

    • These activities are balanced against your rights and freedoms.
       

  • Consent (Art. 6(1)(a))

    • For optional activities, such as marketing emails, surveys, or cookies that are not strictly necessary.

    • You can withdraw your consent at any time.


5) Children & minors

​​​

In Austria, children aged 14 and above can give their own consent for digital services (such as cookies or online contact). For children under 14, consent must come from a parent or legal guardian (GDPR Hub).

​

At PlayVR, some of our simulators are suitable from ages 6, while most experiences are recommended from ages 8 and above. Younger visitors must always be accompanied by a parent or guardian, who takes full responsibility for their participation 


6) Cookies, SDKs & online tracking

 

Our website uses a limited set of cookies. These are small text files stored on your device to keep the site secure and working smoothly. In accordance with the GDPR and the EU ePrivacy Directive, only strictly necessary cookies are always active. Non-essential cookies (such as analytics) are only set with your consent, which you can withdraw at any time.

​

Cookies used:

  • XSRF token – protects the website against cross-site request forgery attacks (essential). These cookies are temporary and are automatically deleted when you close your browser.

  • hs – Security cookie (essential). These cookies are temporary and are automatically deleted when you close your browser.

  • bSession –   Measures system performance (essential). These cookies are temporary and are automatically deleted after 24 hours.

  • server-session-bind – Session management (essential). These cookies are temporary and are automatically deleted when you close your browser.

  • vSession – Identifies unique visitors and tracks sessions. According to the cookie database ( Cookie.is ), this cookie expires after approximately 400 days (approximately 13 months).

 

We do not use third-party SDKs or advertising trackers.

(Sources: European Commission – Cookies , GDPR.eu – Cookies )


7) Promotions, competitions, UGC & social

​

From time to time, PlayVR may run promotions, advertising campaigns, or competitions, either directly or in partnership with the Auhof Center or other partners. Participation is always voluntary. If you choose to take part, we may process basic contact details or responses for the purpose of managing the activity, selecting winners, and delivering prizes. We process this data based on Article 6 (1) (f) GDPR (“legitimate interest”) or Article 6 (1) (b) GDPR (“fulfilment of a contract”).

​

We may capture photos and videos at PlayVR for use on our social media channels (Instagram, TikTok, YouTube) and in Auhof Center newsletters. If you are recognizable in such material, we will only publish it with your prior consent and permission. You may withdraw your consent and request removal of identifiable content at any time.

​

We do not require or encourage customers to upload personal photos or videos directly to our website. However, if you publicly tag or mention PlayVR on social media, we may share or repost your content, in line with the terms of that platform.

​

PlayVR will never use your personal data for promotions or marketing without your consent, and you can opt out of marketing communications at any time.


8) Disclosures to third parties (processors & partners)

​

We share personal data only where necessary and always in line with GDPR requirements. The categories of third parties we may disclose information to include:

​

  • Payment providers – When you pay by card, your transaction is processed directly by the payment provider. They act as independent controllers and handle your data in accordance with their own privacy policies. Cash payments do not involve any personal data.

  • Website and hosting services – Our website is hosted and operated through Wix, which processes technical and cookie data on our behalf.

  • Analytics and advertising providers – We use Google Analytics to understand website traffic and Google Ads for online promotion. These providers may process usage data in line with their own privacy practices.

  • Business partners for promotions – We may share marketing materials (such as our logo, designs, or promotional content) with the Auhof Center and nearby partner stores for joint campaigns or newsletters. Future collaborations with tourism or public partners may also involve similar disclosures, always limited to promotional purposes.

  • Authorities and legal obligations – In rare cases, we may disclose information where required to comply with Austrian law, regulatory obligations, or lawful requests from authorities.

 

We do not sell personal data. Any partners acting as processors are bound by contractual agreements to protect your information.


9) International transfers

Some of our service providers (for example, Wix and Google) may process personal data outside the European Union/EEA. Where such transfers occur, they are safeguarded by either:

​

  • An adequacy decision of the European Commission (e.g., Israel), or

  • Standard Contractual Clauses (SCCs) approved by the European Commission, and/or

  • Participation in the EU–US Data Privacy Framework (for eligible US companies such as Google).

 

These mechanisms ensure that your personal data continues to be protected to EU standards, even when processed internationally. We are happy to provide you with the relevant safeguards upon request (please see contact details in Section 1 above).


10) Retention

PlayVR does not normally store personal data about visitors.

​

  • Payments are processed directly by the payment provider; we do not retain card details.

  • Website cookies are stored on your device for their technical lifetime (from session-only up to approx. 1 year for analytics cookies).

  • Surveys and simulator usage data are collected only in anonymous or aggregated form.

  • Promotions and newsletters (if you choose to sign up in the future) will be kept only until you unsubscribe or withdraw your consent.
     

In all cases, we apply the principle of data minimisation and do not retain information longer than necessary.


11) Your rights

 

As a data subject within the meaning of the General Data Protection Regulation (GDPR), you have the following rights:

 

  • Access – to know what data we hold about you.

  • Rectification – to correct inaccurate or incomplete data.

  • Erasure – to request deletion of your data where legally possible.

  • Restriction – to limit how we process your data in certain cases.

  • Portability – to receive your data in a structured, machine-readable format.

  • Objection – to object to processing based on legitimate interests.

  • Withdrawal of consent – to withdraw any processing based on consent (e.g. marketing) at any time.

​

Exercising your rights will not affect the lawfulness of processing carried out before your withdrawal.

 

To exercise any of these rights, please contact us at office@playvr.at

 

You also have the right to complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde):
Barichgasse 40–42, 1030 Vienna


12) Security and Data Breaches

​

PlayVR does not collect or store personal data that could expose visitors to significant risk in the event of a breach. Payments are processed directly by independent providers, and website data is limited to essential cookies and anonymised analytics.

​

For the small amount of data we do handle (such as consent preferences or marketing sign-ups, if provided), our trusted service providers apply industry-standard safeguards. Should a personal data breach occur, we will follow GDPR requirements, including notifying the Austrian Data Protection Authority and affected individuals where necessary.


13) Health Information

 

If you choose to share health-related information with our staff (for example, if you are sensitive to motion or have a condition that may affect your VR experience), we will use it only to recommend suitable simulators or experiences for your visit. We do not record or retain such information after your visit.


14) Third-party sites & links

 

Our website and services may include links to third-party websites or social media platforms. We are not responsible for the privacy practices of these external providers. If you choose to interact with them (for example, by leaving a Google Review or visiting our social channels), your data will be governed by their own privacy policies. We encourage you to review those policies before providing personal information.


15) Changes to this Policy

 

We may update this Policy to reflect operational or legal changes. We will post updates here with a new “Last updated” date and, where appropriate, provide a more prominent notice.


16) Contact

 

  • Email: office@playvr.at

  • Postal address: PlayVR Funpark GmbH, Albert-Schweitzer-Gasse 6/Top 203+205, 1140 Vienna, Austria

 

If you require this policy in an accessible or alternative format, please contact us.


17) Cookie Policy (separate document)

 

For details about cookie categories, purposes, vendors, and consent management, please see our Cookie Policy .

​

​

bottom of page