KAFFA KOFFEE ORGANISATION, S.L. – €2,000 Fine (Spain, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
KAFFA KOFFEE ORGANISATION was fined for sending emails without using the blind carbon copy (BCC) feature, which exposed recipients' email addresses. This mistake could lead to privacy breaches and shows the importance of protecting personal information in communications. Businesses must be careful with how they handle customer data.
What happened
The Spanish DPA fined KAFFA KOFFEE ORGANISATION EUR 2,000 for improperly disclosing email addresses by not using BCC.
Who was affected
Email recipients whose addresses were exposed to each other due to the company's failure to use BCC.
What the authority found
The DPA found that KAFFA KOFFEE ORGANISATION violated GDPR by failing to ensure the confidentiality of personal data in emails.
Why this matters
This case serves as a reminder for businesses to implement proper email practices to protect customer privacy. It highlights the potential consequences of careless handling of personal information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA fined KAFFA KOFFEE ORGANISATION, S.L. EUR 2,000 for sending emails to different recipients without including them in the blind carbon copy (BCC) list. This resulted in the unauthorized disclosure of email addresses to the other recipients.
Related Enforcement Actions (0)
No other enforcement actions found for KAFFA KOFFEE ORGANISATION, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
7 November 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€2,000
About this data
Cite as: Cookie Fines. KAFFA KOFFEE ORGANISATION, S.L. - Spain (2024). Retrieved from cookiefines.eu
Last updated: