Mandatory legal texts for your website in 2026 (GDPR and LSSI)
Which legal texts your website or online store needs: legal notice, privacy policy, cookies and terms. 2026 guide with regulations and a free generator.
Having a website without its legal texts is one of the most common —and most expensive— mistakes made by freelancers and small businesses. Spanish and European regulations require you to disclose who is behind the site and how visitors’ data is processed, and the AEPD (Spanish Data Protection Agency) can fine you for non-compliance. The good news: getting them in order is easier than it seems, and you can generate them for free.
In this guide we explain which legal texts are mandatory for your website in 2026, depending on the type of site you have, and how to create them in a couple of minutes.
Summary (30 seconds)
- Every website with economic activity needs, at minimum, a legal notice, a privacy policy and, if it uses non-technical cookies, a cookie policy.
- If you sell online, you also need terms of sale and a returns policy.
- Each form must include its own data protection clause and a consent checkbox.
- You can generate them all for free with our legal texts generator (compliant with GDPR, the LOPDGDD (Spanish Data Protection Act) and the LSSI-CE (Spanish E-commerce Law 34/2002)).
Which legal texts should your website have?
Not every website needs the same thing. It depends on whether you collect data, whether you sell, and on the nature of your business. These are the key documents:
1. Legal notice
It is mandatory under art. 10 of the LSSI-CE (Spanish E-commerce Law 34/2002) for any website with economic activity (including advertising or affiliate links). It must identify the owner: name or company name, NIF/CIF (tax ID), address, email and registration details where applicable.
2. Privacy policy
Mandatory whenever you collect personal data (a simple contact form already counts). It is required by the GDPR (arts. 13 and 14) and the LOPDGDD (Spanish Data Protection Act). It must explain who the data controller is, the purpose for which you process the data, the legal basis, how long you keep it and how to exercise your rights.
3. Cookie policy
If your website uses cookies that are not strictly technical (analytics, advertising, social media), art. 22.2 of the LSSI requires you to inform users and request consent. In addition to the text, you need a cookie banner that allows users to accept and reject on an equal footing, in line with the AEPD (Spanish Data Protection Agency) guidelines.
4. Terms of sale and returns
If you have an online store, the RDL 1/2007 (Spanish Consumer Protection Act) requires you to inform customers, before purchase, about the process, prices, payment, delivery, warranties and the 14-day right of withdrawal.
5. Clause for forms
Every form that collects data must include the basic data protection information and a consent checkbox (not pre-ticked by default). Having the privacy policy in the footer is not enough.
Quick table: what each type of website needs
| Type of website | Legal notice | Privacy | Cookies | Terms of sale |
|---|---|---|---|---|
| Online store | ✓ | ✓ | ✓¹ | ✓ |
| Website with forms | ✓ | ✓ | ✓¹ | — |
| Company informational website | ✓ | ✓ | ✓¹ | — |
| Personal website with no data | — | — | — | — |
¹ Only if the website installs non-technical cookies. Indicative table.
What happens if I don’t have them?
The AEPD (Spanish Data Protection Agency) can impose penalties for failing to provide data protection information, and the LSSI sets out fines for not identifying the site owner. Beyond the penalty, clear legal texts build trust with your visitors and customers: they convey professionalism and reduce hesitation at the moment of purchase or contact.
How to create your legal texts for free
You don’t need a lawyer to get started. With our free legal texts generator you answer a few questions about your business and get each document ready to copy or download in Word or PDF. It covers the 15 most common documents —privacy, legal notice, cookies, terms of sale, returns, cookie banner, NDA and more— drafted in accordance with current regulations and available in Spanish, Catalan and English.
Important: these templates are indicative. Every business is different and you should review and adapt them to your real situation. For complex cases, consult a legal professional.
What if you’d rather we did it for you?
At DominaInternet we design websites and online stores with everything in order from day one: legal texts, a properly configured cookie banner and GDPR-compliant forms. If you want a professional website without worrying about the fine print, tell us about your project.
Start now: generate your website’s legal texts for free at textos-legales.dominainternet.com.