Privacy Policy

Last Updated & Effective: January 1, 2026 | Document Ref: PF-GDPR-2026-V1

At Portalfeedbt (operated by Portalfeedbt Travel Technologies B.V., registered under Netherlands Chamber of Commerce KVK 84920193, Keizersgracht 482, 1016 GD Amsterdam), we respect your fundamental right to privacy and are committed to complying with the EU General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR"), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect data to provide seamless itinerary construction and rail synchronization services. The categories of data processed include:

User-Supplied Configuration Data: Selected travel origin points, target European destinations, stay durations, accommodation tier preferences, and activity selections stored within your browser's local state.
Communication Data: Name, business or personal email address, subject matter, and inquiry text transmitted via our contact forms.
Technical & Telemetry Data: Anonymized IP addresses, browser fingerprint types, operating system details, time zones, referring URLs, and route engine interaction timings.

2. Legal Basis for Data Processing (GDPR Article 6)

We process personal data strictly under valid lawful bases:

Performance of Contract (Art. 6(1)(b)): To calculate, render, and output your configured European trip dossiers and rail connections.
Legitimate Interests (Art. 6(1)(f)): To maintain platform security, diagnose server anomalies, and optimize route computation speed.
Consent (Art. 6(1)(a)): For non-essential analytics and performance cookies explicitly granted through our Cookie Consent mechanism.

3. Third-Party Sub-Processors & Data Transfer

We do not sell, rent, or trade your personal data to third parties. We utilize strictly audited infrastructure providers operating within the European Economic Area (EEA) or bound by Standard Contractual Clauses (SCCs):

Cloud Infrastructure: European data center nodes providing high-availability static asset delivery and SSL termination.
Analytics (Privacy-Focused): Aggregated server-side metrics without personal identifier linkage.

4. Data Retention Schedule

Browser-stored trip builder sessions persist locally in your browser storage until manually cleared or exported. Contact desk communications are archived for a maximum period of twenty-four (24) months for audit and support resolution purposes, after which they are securely expunged.

5. Your Statutory Rights Under GDPR & CCPA

As a data subject, you maintain unconditional statutory rights:

Right to Access & Portability: Request an export of any personal records held concerning your profile.
Right to Rectification & Erasure: Request the correction of inaccuracies or complete deletion ("Right to be Forgotten").
Right to Restrict or Object: Restrict processing or object to legitimate-interest activities at any juncture.

6. Data Protection Officer & Inquiries

To exercise your rights or submit a privacy compliance request, please contact our Data Protection Officer at: [email protected] or write by post to: Portalfeedbt Travel Technologies B.V., Attn: Data Protection Officer, Keizersgracht 482, 1016 GD Amsterdam, Netherlands.