Effective Date: October 12, 2026 · Version 1.1

Privacy Policy

Voyage2 B.V. is committed to transparent, privacy-first travel planning. This policy details how we process, secure, and respect your personal data under the General Data Protection Regulation (GDPR / AVG).

1 Data Controller & Contact Details

The data controller responsible for the processing of your personal data on the Voyage² platform (accessible via web and mobile applications) is:

Operating Entity

Voyage2 B.V. (d.b.a. Voyage / Voyage²)
Bankastraat 84
2585 ER 's-Gravenhage
The Netherlands

Corporate Registration

Chamber of Commerce (KvK): 42147029
RSIN: 869923237
Statutory Seat: 's-Gravenhage
Email: [email protected]

For any questions regarding this Privacy Policy, your rights under the GDPR, or how your personal data is handled, you may reach our privacy desk directly at [email protected].

2 Our Privacy Principles

Voyage² is engineered with Privacy by Design and Privacy by Default (Article 25 GDPR). We operate under the following core commitments:

  • No Advertising Brokerage: We do not sell, rent, or trade your personal data, travel queries, or booking history to third-party data brokers or advertising networks.
  • Data Minimization: We only collect the minimal personal data required to calculate transit itineraries, reserve tickets with licensed carriers, process payments, and ensure server security.
  • Strong Cryptographic Protection: Highly sensitive identification data (such as passport numbers stored in account profiles) is encrypted at rest using industry-standard symmetric cryptography (Fernet AES-256).

3 Categories of Personal Data We Collect

Depending on how you use our platform, we process the following categories of personal data:

3.1. Account & Profile Data (Registered Users)

  • Credentials: Username, email address, and cryptographically hashed passwords (using PBKDF2 with SHA-256).
  • Single Sign-On (OAuth): Profile identifiers and verified email addresses if you register or log in using Google OAuth 2.0 or Facebook (Meta) Login.
  • User Preferences: Travel priorities (e.g., eco-friendly, fast, low-transfer, low-stress) and onboarding questionnaire responses.
  • Home Station & Location: Saved home address and associated geographic coordinates to streamline origin pre-filling.

3.2. Saved Passenger Information (Optional)

To speed up future ticket purchases, registered users may save traveler profiles:

  • Full legal name, date of birth, and nationality.
  • Passport & ID Numbers: Stored in our database strictly in encrypted ciphertext using Fernet AES-256.

3.3. Booking & Transaction Records

  • Order Details: Unique order reference, origin/destination hubs, travel dates, seat/couchette categories, and ticket fares.
  • Payment Status: Mollie transaction identifiers and payment state. Full payment card details are handled directly by Mollie B.V. and are never stored on Voyage² servers.

3.4. Technical Telemetry & Server Logs

  • IP addresses, browser user-agents, calculation latency, and diagnostic error traces. Logged to maintain server security and prevent abuse. After 180 days, IP addresses are pruned or anonymized.

3.5. Usage Analytics & Session Recordings (Only With Your Consent)

If you choose “Accept All” in the cookie banner, we measure how Voyage² is used so we can improve the planner and the routing engine:

  • Usage statistics (Google Analytics 4, via Google Tag Manager): Pages viewed, interactions, referring page, approximate location (derived from your IP address, which Google Analytics does not log or store), device, browser and language, and a random identifier stored in a cookie.
  • Session recordings & heatmaps (Microsoft Clarity): Pages viewed, mouse movements, clicks, taps and scrolling, plus device, browser and approximate location, linked by a random identifier stored in a cookie. Text typed into form fields is always masked, and in our default configuration numbers and email addresses shown on a page are masked too.

The page addresses these tools record can include the stations and cities you search for, but never a street address you type: that stays in your browser.

Before you choose: Nothing from Google or Microsoft is loaded, so no data reaches them and no analytics cookies are set. The Google Tag Manager and Clarity scripts are only loaded after you choose “Accept All”, and on later visits for as long as that choice stands. They are never loaded on login, account, booking or password-reset pages.

4 Purposes and Legal Bases (Article 6 GDPR)

Purpose Data Categories GDPR Legal Basis (Art. 6)
Route Planning & Calculations Origin, destination, preferences Contract performance (Art. 6(1)(b))
Ticket Issuance & Booking Passenger names, dates of birth, e-tickets Contract performance (Art. 6(1)(b))
Payment Processing & Invoicing Order totals, Mollie ID, invoice details Contract & Legal obligation (Art. 6(1)(b)/(c))
Tax Retention (7 Years) Invoices, booking totals, order logs Legal obligation (Art. 52 AWR / Art. 6(1)(c))
Server Security & Fraud Prevention IP logs, server telemetry, error traces Legitimate interest (Art. 6(1)(f))
Usage Analytics & Session Recordings (Google Analytics, Microsoft Clarity) Cookie identifiers, pages viewed, clicks and scrolling, device and browser data, approximate location Consent (Art. 6(1)(a)); for cookies also Art. 11.7a Telecommunicatiewet

5 Recipients & Sub-processors

Voyage² shares personal data strictly with trusted service providers as necessary to deliver our services:

  • Ticketing Gateway (All Aboard AB & Railway Undertakings): For reserving and generating official e-tickets with European transport carriers.
  • Payment Service Provider (Mollie B.V.): Regulated payment institution supervised by De Nederlandsche Bank (DNB) for secure iDEAL and European payments.
  • Cloud Hosting (Amazon Web Services / Lightsail): Hosted securely within the European Economic Area (Frankfurt, Germany).
  • Web Analytics (Google Ireland Limited): Google Analytics 4 and Google Tag Manager, loaded only with your consent and used for the usage statistics described in section 6.
  • Session Analytics (Microsoft Ireland Operations Limited): Microsoft Clarity, loaded only with your consent and used for session recordings and heatmaps. Microsoft processes this data as a data controller under the Microsoft Privacy Statement; Google's practices are described in the Google Privacy Policy.

Google and Microsoft may transfer analytics data to their parent companies in the United States. These transfers rely on the European Commission's Standard Contractual Clauses and, where the recipient is certified, on the EU–US Data Privacy Framework.

6 Cookies & Similar Technologies

Voyage² uses a small number of cookies and browser storage entries. Essential ones are always active; analytics ones are only used with your consent (Art. 6(1)(a) GDPR and Art. 11.7a of the Dutch Telecommunications Act, the Telecommunicatiewet).

6.1. Essential (Always Active)

These keep the site secure and remember your settings. They do not require consent.

Name Purpose Lifetime
sessionid Keeps you signed in and holds your session data Up to 2 weeks
csrftoken Protects forms against cross-site request forgery Up to 1 year
messages Carries a one-time notification (for example “Saved”) to the next page Until shown
django_language, selected_language Remember your language 1 year / until cleared
voyage_consent, voyage_cookie_consent Remember your cookie choice 1 year / until cleared
voyage-theme Remembers light or dark mode Until cleared
voyage-beta-banner-dismissed Remembers that you closed the beta banner Until cleared
voyage_active_plan, voyage_travel_range (session storage) Keeps your trip plan or “Travel range” search while you browse Until you close the tab

6.2. Analytics (Only After “Accept All”)

Name Purpose Lifetime
_ga Google Analytics: tells visitors apart 2 years
_ga_<container-id> Google Analytics: keeps session state 2 years
_clck Microsoft Clarity: random visitor ID and preferences Up to 1 year
_clsk Microsoft Clarity: links page views into one session recording 1 day

We never switch on advertising storage: no advertising or remarketing cookies are used on Voyage², and the matching consent signals sent to Google and Microsoft always stay on “denied”.

6.3. How Your Choice Works

  • Before you choose: Nothing from Google or Microsoft is loaded. No data is sent to them and no analytics cookies are set.
  • “Essential Only”: Nothing from Google or Microsoft is loaded and no analytics cookies are set.
  • “Accept All”: Google Tag Manager and Clarity are loaded, analytics cookies are set and the measurement described in section 3.5 begins.
  • Changing or withdrawing your choice: You can do this at any time, with effect for the future; processing before that moment stays lawful (Art. 7(3) GDPR). Use the Cookie settings link here or in the footer of any page to open the cookie banner again, then choose “Essential Only”. The page then reloads, the analytics cookies are deleted and the scripts are no longer loaded. You can also email [email protected]. In addition, Google offers an opt-out browser add-on for Google Analytics.

7 Data Retention & Anonymization

We do not retain personal data longer than necessary for the purposes for which it was gathered:

  • Tax & Accounting Records: 7 years pursuant to Dutch statutory tax law (Art. 52 AWR).
  • User Accounts: Active for the lifetime of your account. Inactive accounts (>2 years) are pruned after prior notification.
  • Technical IP & Routing Logs: Pruned after 180 days; aggregated statistical telemetry is retained in anonymized form under Recital 26 GDPR.
  • Analytics Data: Google Analytics event data is kept for at most 14 months. Clarity keeps session recordings for 30 days (a small sample, plus sessions we label or favorite, for up to 13 months) and click and heatmap statistics for up to 13 months.

8 Your Rights Under the GDPR

Under the European General Data Protection Regulation, you enjoy comprehensive privacy rights:

  • Right of Access (Art. 15 GDPR): Request a copy of your personal data.
  • Right to Rectification (Art. 16 GDPR): Update inaccurate profile details directly in your account.
  • Right to Erasure (Art. 17 GDPR): Delete your account and personal data with a single click in your profile settings.
  • Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.
  • Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw your consent to analytics cookies at any time, as described in section 6.

You can exercise your rights in your account dashboard or by emailing [email protected].

9 Data Security Measures

Voyage2 B.V. employs robust technical and organizational security controls:

  • TLS 1.3 Transport Encryption: Secures all traffic between your browser and our servers.
  • Fernet AES-256 Symmetric Encryption: Protects stored passport details in our database.
  • Content Security Policy (CSP): Prevents cross-site scripting (XSS) and injection attacks.

10 Complaints & Supervisory Authority

If you have concerns about how we handle your personal data, please contact our team. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens - AP) via autoriteitpersoonsgegevens.nl.