Kukimbia S.L.
€3,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
5 de abril de 2021
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA (AEPD) has fined Kukimbia S.L. EUR 3,000. The controller is a company that stores, transports and distributes goods. Documents containing personal data about the controller's customers and suppliers were found freely accessible next to a trash can near one of the controller's warehouses. The DPA determined that the controller had violated Art. 32 GDPR.
Citas legales
Art. 32 (1)
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security