KAFFA KOFFEE ORGANISATION, S.L.
€2,000
Non-compliance with general data processing principles
Decision Date
November 7, 2024
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Non-compliance with general data processing principles