This is a starting point, not legal advice
This page gives general information for planning a website. It cannot account for your legal form, regulated sector, customers, data use or contracts. Ask a qualified Spanish adviser to review requirements for the business. Sources and guidance can also change, so check the current official text before launch.
Legal notice and business identity
Article 10 of Spain’s Law 34/2002 on information-society services requires covered service providers to make specified identity and contact information permanently, easily, directly and freely accessible. Depending on the business this can include its name or company name, address, email and registration or professional details. Read the current consolidated LSSI text on BOE.
Privacy information where personal data is collected
A contact, booking, account or checkout form can collect personal data. Article 13 of the English-language version of the EU General Data Protection Regulation lists information to provide when data is obtained, including the controller, purposes, legal basis, recipients, retention and people’s rights. Collect only the fields the business genuinely needs and protect access to submissions.
Cookies and similar technology
Non-essential cookies generally require information and valid consent before use. The Spanish data-protection authority says accepting and rejecting should be offered at the same time, at the same level and with the same visibility. It also says withdrawing consent should be as easy as giving it. Use the current AEPD cookie guide when configuring the website. A banner is not enough if tracking loads before the choice.
If customers can buy or book online
Distance-selling rules require clear pre-contract information. The consolidated consumer law on BOE covers matters including trader identity, main characteristics, total price, payment, delivery and withdrawal information. An order button must make a payment obligation unambiguous. Delivery restrictions and accepted payment methods also need to be clear at the required stage.
Accessibility and sector-specific duties
Public-sector sites and some private services face specific accessibility rules and the legal position continues to develop. Tourism, health, finance, property, children’s services and regulated professions can carry additional duties. Do not assume a generic legal-page template covers them.
A sensible launch check
- Confirm the legal identity and contact details
- List every form and the reason for each field
- Inventory cookies, embeds and analytics before writing the cookie page
- Make reject and accept choices equally clear where consent is needed
- Check online prices, taxes, delivery, cancellation and returns
- Record who will keep the information updated
- Obtain tailored advice where the business or processing is not straightforward