De-personalisation means the processing of personal data in such a manner that data can no longer be attributed to a specific individual without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to prevent reattribution.