If someone contacts your organization anonymously from an alias email address to request further details about how you collect and process a certain type of data that isn't described in your privacy policy as mandated, be wary.
It is best to answer promptly, truthfully, and thoroughly.
It could be a privacy professional about to report you to the data protection authority.