Digital Twin Travellers: Disaggregated Travel Demand From Aggregated Mobile Phone Data—A Privacy By Design Approach