We use the open‑source analytics tool BBClone on our website to generate anonymous visitor statistics. BBClone is operated entirely on our own server. No data is transmitted to third parties or external analytics providers at any time.

Types of Data Processed

• anonymized IP address
• date and time of access
• accessed page
• referrer (if transmitted)
• browser type and version
• operating system
• hostname (if detectable)
• top‑level domain or country of origin (Geo‑IP, determined locally)

This data is not personal data, as the IP address is anonymized before storage.

IP Address Anonymization

To protect your privacy, the IP address is anonymized before any storage by removing or replacing the last numerical block with “-”.
Example: 192.168.55.123 → 192.168.55.-

Geographical Assignment (Geo‑IP)

A locally stored Geo‑IP database is used to determine the approximate country of origin. The IP address is not transmitted to external services. Processing takes place exclusively locally, anonymously, and without profiling.

Purpose of Processing

• technical analysis of website usage
• optimization of content and server performance
• detection and prevention of malicious access (IT security)

No tracking, marketing, or profiling takes place.

Legal Basis

Art. 6(1)(f) GDPR (legitimate interest in stability, security, and optimization of the website).

Storage Duration

Anonymized statistical data is stored for a limited period depending on server configuration. Since no personal data is involved, longer storage periods are permissible.

Cookies and Sessions

BBClone itself does not set any cookies. If a country code (e.g., “DE”) is stored, this is done solely as a technically necessary measure under § 25(2) No. 2 TTDSG.

No Disclosure to Third Parties

All data is processed exclusively on our own server. No data is transmitted to external analytics services such as Google Analytics, Matomo Cloud, or Cloudflare.

Right to Object

Since the data is anonymized and no personal reference exists, a right to object under Art. 21 GDPR is not required.