Shop Macoyn, S.L.
€5,000
Insufficient technical and organisational measures to ensure information security
Decision Date
December 10, 2019
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The company has sent advertising e-mails to several recipients where the e-mail addresses of all other recipients were visible to all recipients, because the recipient addresses were inserted as CC and not as BCC.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security