Bringing a website into line, starting with whether you need to
A lot of compliance gets sold that nobody needs. Before charging you to adapt your site to a rule, the first question is whether that rule reaches you at all, because several carry exemptions that leave most small businesses out.
What is mandatory, no exceptions
The legal notice. Spanish Law 34/2002, article 10, requires publishing your name or company name, tax ID, address and a means of direct contact. The tax ID admits no nuance: it has to be there. Leaving it out is a minor infringement, with fines up to €30,000.
And the data-protection information if there's a form, even one that only asks for a name and an email. A form with no stated legal basis is the most repeated failure on small-business sites, and the cheapest to fix.
Cookies, and why this site has no banner
The banner isn't the obligation: the obligation is asking for consent before installing cookies that aren't strictly necessary. If you don't install them, there's nothing to consent to and no banner is needed. This site uses no analytics, no pixels and no embedded video, which is why no window appeared.
Where they are needed, the Spanish DPA has concrete criteria that hardly any banner meets: rejecting must cost the same as accepting, and continuing to browse doesn't count as consent. A badly built banner carries the same fine as having none, with the added problem that it looked handled.
Accessibility: check the exemption before the obligation
Spain's Law 11/2023 carries an exemption for micro-enterprises — under ten staff and under two million in turnover or balance sheet — and its list of covered services is closed. If you also don't sell online, the odds are it doesn't reach you.
That isn't advice to ignore it: an accessible site is easier to use and more people can use it, and some of it costs nothing when done right from the start. It's advice not to pay for a full adaptation nobody is demanding. We tell you where to check and we check it with you; this is not legal advice.
What it costs
Prices exclude VAT.
Bring someone else's site into line
€390
Legal notice, privacy and cookies, with the banner the Spanish DPA actually requires.
Tune-up
€290free if you hire within 30 days
We check your site with the same tool Google uses and against what Spanish law requires. You get a document with what's wrong, the rule that says so, and what each fix costs.
Timeline: 3 days
Questions we get
- I've been told I can be fined for not having a cookie banner.
- Only if you install cookies that require one. The first step is checking what your site actually loads, which takes a minute. Sometimes the answer is that the banner you already have is unnecessary.
- Can you bring a site someone else built into line?
- Yes, that's exactly what the €390 package covers. It doesn't have to be one we built, and we don't need access to anything beyond what's required to publish the pages.
- Are the legal texts templates?
- The structure is, because the law sets it. What isn't a template is the data: who processes it, on what legal basis, which providers sit behind it and how long each thing is kept. A legal text carrying someone else's providers is a text that doesn't protect you.
- Is this legal advice?
- No. We tell you what the rule says, where it's written and how to verify it, and we verify it with you. For an interpretation carrying professional liability you need a lawyer, and we'll say so when that's the case.
A one-page report within 48 hours: what your site takes to load, what breaks on a phone, and the three things costing you the most customers. No call, no commitment.
Monday to Saturday, 10:00–21:00