Data processed when you visit
The hosting infrastructure may process the IP address, user-agent, requested URL, request time and security diagnostics needed to deliver and protect the website.
- Session and CSRF identifiers used to keep forms and route-planner requests secure.
- Origin, destination, transit countries and travel dates submitted to the planner. They are processed to return the requested routes and are not stored in the application database.
- No account, profile or payment-card data is collected by Vignette Route.
Purposes and legal bases
Technical request data and essential session identifiers are processed to provide the requested service, prevent abuse and maintain a secure and reliable website. The legal basis is the operator’s legitimate interest in operating and protecting the service, together with steps taken at the user’s request where applicable.
Recipients, hosting and transfers
Technical data may be handled by the hosting, CDN or security providers named in the operator details. Vignette Route does not sell personal data. Any transfer outside the EEA must use an applicable GDPR transfer mechanism and be disclosed here before launch.
Retention
Route-planner inputs are not persisted by the application. Session identifiers expire after the duration shown in the cookie policy. Access and security log retention is determined by the production hosting configuration and is shown in the processing details on this page.
Your rights
Subject to the GDPR and applicable law, you may request access, rectification, erasure, restriction or portability, and object to processing based on legitimate interests. You may also complain to the competent supervisory authority. Use the operator contact details to exercise these rights.
Analytics and automated decisions
The current site does not load analytics or advertising trackers. If optional analytics is introduced, it will remain disabled until valid consent is given and this policy is updated. Vignette Route does not make automated decisions that produce legal or similarly significant effects.
Spam protection (Google reCAPTCHA)
When you send a message through the contact form, Google reCAPTCHA processes technical data — including your IP address and interaction signals — to estimate how likely the request is automated, so we can block spam.
reCAPTCHA is provided by Google, which may process this data outside the EU/EEA. The legal basis is our legitimate interest in preventing abuse (GDPR Art. 6(1)(f)). Google's Privacy Policy applies.