Treffer: The costs of anonymization: case study using clinical data