Does Crobox process Personal Identifiable Information (PII)?
The only PII that is temporarily processed and transformed (anonymized) is the IP address belonging to a web or HTTP session. Whenever a visitor enters the website of the Data Controller, Crobox creates a new session that holds information belonging to that specific visitor as long as (s)he is active on the website.
Specifically, Crobox uses the IP address to determine the city/country/region of the respective visitor. Whether this mapping is successful or not, the IP address is immediately discarded, thus, it is not persisted.