Spain

KAFFA KOFFEE ORGANISATION, S.L.

900 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-06-19.

Rank · Sector

#588

of 636 in Industry and Commerce

Rank · Spain

#897

of 1,104

Rank · All fines

#2,879

of 3,197

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-06-19
Controller / Processor: KAFFA KOFFEE ORGANISATION, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 58 (2) d) GDPR, Art. 83 (6) GDPR
Type of violation: Insufficient cooperation with supervisory authority

Summary

The Spanish DPA has imposed a fine of EUR 900 on KAFFA KOFFEE ORGANISATION, S.L. In an earlier procedure the AEPD had ordered the controller to implement measures to prevent email addresses from being accessed in emails sent to multiple recipients. After the deadline expired the AEPD sent two letters reminding the controller to implement the measures, each with a 10 day deadline. As the controller did not comply within the given time a fine of EUR 900 was issued.

Open original source Links to the regulator's original publication or another source.