Spain

KAFFA KOFFEE ORGANISATION, S.L.

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-11-07.

Rank · Sector

#453

of 597 in Industry and Commerce

Rank · Spain

#721

of 1,075

Rank · All fines

#2,368

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-11-07
Controller / Processor: KAFFA KOFFEE ORGANISATION, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.

Open original source Links to the regulator's original publication or another source.