What type of handles / domain contacts are allowed in which roles with .DE domains?

PERSON or ORG are permitted for the domain owner.

The administrative contact must be of the PERSON type.

Only PERSON and ROLE are permitted for technical contact and the zone administrator.