# PUNTO BADAL-BCN S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-10-09
- Original: https://www.enforcementtracker.com/ETid-1425
- Canonical: https://overview.legal/posts/47540
- Topics: IP Address, Security, Controllers, Processing Agreement, Direct Marketing, Supervisory Authorities, Data Controller, Marketing

## Summary

The Spanish DPA has imposed a fine on the real estate agency PUNTO BADAL-BCN S.L.. The controller had sent marketing e-mails to several people in an open distribution list, making the email addresses of all recipients visible to the other recipients. The original fine of EUR 5,000 was reduced to EUR 4,000 due to voluntary payment.

## Full text

The Spanish DPA has imposed a fine on the real estate agency PUNTO BADAL-BCN S.L.. The controller had sent marketing e-mails to several people in an open distribution list, making the email addresses of all recipients visible to the other recipients. The original fine of EUR 5,000 was reduced to EUR 4,000 due to voluntary payment.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 (1) GDPR
Industry: Real Estate

---
Generated by overview.legal · https://overview.legal/posts/47540 · 2026-08-22