Art. 18 (1) DGA:

"Any entity entered in a public national register of recognised data altruism organisations shall keep full and accurate records concerning:

(a) all natural or legal persons that were given the possibility to process data held by that entity, and their contact details;

[...]"

Art. 18 (2) DGA:

"Any entity entered in a public national register of recognised data altruism organisations shall draw up and transmit to the relevant competent national authority for the registration of data altruism organisations an annual activity report which shall contain at least the following:

[...]

(c) a list of all natural and legal persons that were allowed to process data it holds, including a summary description of the general interest purposes pursued by such data processing and the description of the technical means used for it, including a description of the techniques used to preserve privacy and data protection;

[...]."