Privacy

Data controller

[Name and address — see Imprint]

What data we process

Running this site produces the following data:

• Searches: origin, destination, date, traveller count and class. We store the resulting prices to learn what’s typical on a route.
• Selected fares: price, commission and timestamp — as a record of what was shown.
• Contact details: only if you request a personal quote (name, email, optional phone and your message).
• Account data: for a customer, Family & Friends or admin account — name, email and your password in encrypted form (bcrypt). We can’t read the password itself either.
• Booking data: the booking details reported back by the booking provider (reference, route, amount).

What we deliberately don’t process

Payment data. Card numbers, account details and similar are entered exclusively on the booking provider’s page. They never reach our systems and are never stored by us.

Cookies

We set exactly one cookie, and only once you’ve signed in: it keeps your session going and is strictly necessary. There is no tracking, no analytics or advertising cookies, and no data is passed to third parties for advertising purposes.

Sharing with third parties

To complete a booking, the travel details you enter are passed to the relevant booking provider, since the contract is formed there. For rail and coach you are handed directly to the partner; from that point their privacy notice applies.

[List processors used here — e.g. hosting provider, booking partners, email provider.]

Your rights

You have the right to access, rectify, erase, restrict processing of, and port your data, to object, and to complain to a supervisory authority. An informal message to the address given in the Imprint is enough.

Retention

[Add concrete periods. Starting points: booking data is subject to commercial and tax record-keeping duties; search and contact data should be deleted considerably sooner.]