# KAFFA KOFFEE ORGANISATION, S.L.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2024-11-07
- Original: https://www.enforcementtracker.com/ETid-2498
- Canonical: https://overview.legal/posts/48613
- Topics: IP Address, Processing Agreement, Processing, Supervisory Authorities

## Summary

The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.

## Full text

The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48613 · 2026-08-22