Spain

KAFFA KOFFEE ORGANISATION, S.L.

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-11-07.

Rank · Sector

#454

of 599 in Industry and Commerce

Rank · Spain

#724

of 1,078

Rank · All fines

#2,374

of 3,059

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-11-07
Controller / Processor: KAFFA KOFFEE ORGANISATION, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.

Open original source Links to the regulator's original publication or another source.