Websites in Spain are subject to the Spanish law on information society services and e-commerce (LSSI) and to European data protection rules (the GDPR) together with the Spanish data protection law (LOPDGDD). In practice that means several mandatory pages and a properly built cookie banner.
Legal notice (aviso legal)
The LSSI requires that a visitor can easily find out who is behind the site. This page usually states:
- the name or company name and the tax number (NIF);
- an address and an email for contact;
- details of the company's registration in the commercial register, if it is registered there;
- for professions with compulsory registration, such as lawyers or doctors, the details of the professional association.
Privacy policy
If your site has an enquiry form, you receive personal data. The policy explains who receives it, why, how long it's kept, who it may be passed to and how a person can view, correct or delete their data. Next to the form it's worth saying the same thing briefly and linking to the policy.
Cookies: the policy and the consent banner
- Analytics, advertising pixels and other non-essential cookies can only be switched on after the visitor consents.
- In the cookie banner the "Accept" and "Reject" buttons must be equally prominent. Hiding the refusal in settings isn't allowed.
- A person can change their decision at any time.
- The cookie policy lists which cookies the site sets, why and for how long.
What's added for an online store
- Terms of sale: payment, delivery, returns and warranty.
- The buyer's right to return goods within 14 days and a clear description of how to do it.
- Final prices for buyers include taxes.
- Accessibility requirements: since June 2025 they have applied in the EU to online stores. Micro-enterprises that provide services are exempt, but a site that's easy for everyone to use benefits in any case.
Common mistakes
- Analytics and pixels load before the person has pressed "Accept".
- The cookie banner has only an "Accept" button.
- Legal text copied from someone else's site doesn't match what your site actually does.
- The enquiry form has no link to the privacy policy.
How we do it
We work in Spain and build the cookie banner and legal pages under Spanish and EU rules. More on the page website design in Spain.
This article explains the general requirements in plain words and is not a substitute for legal advice. If your business has special conditions, for example healthcare or finance, check the details with a specialist.
