Spain

Kukimbia S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-04-05.

Rank · Sector

#366

of 597 in Industry and Commerce

Rank · Spain

#609

of 1,075

Rank · All fines

#2,029

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-04-05
Controller / Processor: Kukimbia S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA (AEPD) has fined Kukimbia S.L. EUR 3,000. The controller is a company that stores, transports and distributes goods. Documents containing personal data about the controller's customers and suppliers were found freely accessible next to a trash can near one of the controller's warehouses. The DPA determined that the controller had violated Art. 32 GDPR.

Open original source Links to the regulator's original publication or another source.