Spain

KAFFA KOFFEE ORGANISATION, S.L.

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-11-07.

Rank · Sector

#461

of 608 in Industry and Commerce

Rank · Spain

#725

of 1,079

Rank · All fines

#2,395

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-11-07
Controller / Processor: KAFFA KOFFEE ORGANISATION, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.

Open original source Links to the regulator's original publication or another source.