Spain

Kukimbia S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-04-05.

Rank · Sector

#367

of 599 in Industry and Commerce

Rank · Spain

#612

of 1,078

Rank · All fines

#2,035

of 3,059

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-04-05
Controller / Processor: Kukimbia S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA (AEPD) has fined Kukimbia S.L. EUR 3,000. The controller is a company that stores, transports and distributes goods. Documents containing personal data about the controller's customers and suppliers were found freely accessible next to a trash can near one of the controller's warehouses. The DPA determined that the controller had violated Art. 32 GDPR.

Open original source Links to the regulator's original publication or another source.