Change access template w/r/t information about recipients

[baltpeter]

There has been an ECJ judgement on this topic today. From the press release:

In today’s judgment, the Court replies that where personal data have been or will be disclosed to recipients, there is an obligation on the part of the controller to provide the data subject, on request, with the actual identity of those recipients. It is only where it is not (yet) possible to identify those recipients that the controller may indicate only the categories of recipient in question. That is also the case where the controller demonstrates that the request is manifestly unfounded or excessive.

We should probably also change the text of the access template. Currently, it says:

the recipients or categories of recipient to whom the personal data have been or will be disclosed;

Which is copied from the GDPR. But from the judgement (currently only available in German):

Insbesondere umfasst dieses Auskunftsrecht die Möglichkeit für die betroffene Person, von dem Verantwortlichen Informationen über bestimmte Empfänger zu erhalten, gegenüber denen Daten offengelegt worden sind oder noch offengelegt werden, oder alternativ zu entscheiden, nur Informationen über die Kategorien von Empfängern anzufordern.

Our wording may be misinterpreted by ill-meaning controllers.