Movement data anonymity through generalization