Spain

KAFFA KOFFEE ORGANISATION, S.L.

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-11-07.

Rank · Sector

#477

of 628 in Industry and Commerce

Rank · Spain

#725

of 1,079

Rank · All fines

#2,466

of 3,170

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-11-07
Controller / Processor: KAFFA KOFFEE ORGANISATION, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.

Open original source Links to the regulator's original publication or another source.