German NGOs face two critical compliance requirements: issuing legally valid Zuwendungsbestätigungen and protecting donor data under the DSGVO. This practical checklist explains the €300 donation-receipt threshold, retention versus deletion rules, donor-data obligations, processor contracts, special-category data, and the latest DACH payment-method changes.