Legal texts and cookies

A business website in Spain has to say who owns it, how it handles its customers' data and which cookies it uses. We write all this with your details and keep it up to date: if you change something that affects those texts, the texts change by themselves.

What we generate#

• Legal notice (aviso legal) — who is behind your site, as Spanish law requires of any business: the owner (your name or the registered company name), the trading name if it's different, the NIF, the address, the email and the phone number. A personal page doesn't carry one, and nor does a site in the United States (below).
• Privacy policy — who is responsible for the data, what is collected (for example, what people write to you in the contact form) and what for.
• Cookie policy — which cookies your site uses, and which ones only with the visitor's permission.
• The cookie notice, only if your site loads something from outside (below, “What asks for permission”) — a small notice in a corner of your site, with two equal buttons, “Accept” and “Reject” (rejecting takes exactly the same effort as accepting, as the AEPD, Spain's data protection authority, requires), and below them “Choose what I accept”, which opens a panel with one switch for each thing your site loads from outside. They all start off.

Your site's footer links to both policies as soon as your business has a name and an email, and to the legal notice once the owner, the NIF and the address are there too. If the email is missing, in the editor you'll see “Your footer has no legal links”.

In English, in Catalan and in the United States#

On your English pages, the privacy policy, the cookie policy and the legal notice are in English. It's a fixed text, written once by us — not an automatic translation of your site — and it says the same as the Spanish one: the same laws (the GDPR, the LSSI and the AEPD's rules). On your Catalan pages they're in Spanish, with a note at the top: “Aquest text legal es mostra en castellà.”. How to have your site in several languages is in Languages and translations.

If your business is in the United States — the country you chose when you created your page — your texts follow the rules there:

• A US-style privacy policy, always in English, with what California's privacy law (CalOPPA) asks of a commercial website: what information is collected and why, who it's shared with, that it isn't sold or used for advertising, how to ask to see, correct or delete it, what happens with Do Not Track and Global Privacy Control signals, that the site isn't directed at children under 13, how changes are announced and the date it applies from. On your Spanish pages it's the same, in English, with the note «Este texto legal se muestra en inglés.».
• No legal notice: it's a Spanish law (the LSSI) that doesn't exist there. That's also why we don't ask you for a tax ID when you publish, only the email.
• The cookie policy and the cookie notice, as in Spain, the policy in English: asking permission before loading anything from outside is more than the law there requires.

In any other country we use the Spanish texts. If you use your own text, it shows exactly as you wrote it on every version of your site, with a note at the top on the ones in another language.

What asks for permission#

Your site doesn't use its own cookies to count visits: our Analytics counts on our server, without cookies and without storing anything that identifies anyone, the visits to each page and the taps on call, WhatsApp, email, book, directions, your social media and other links —daily totals only—, and the cookie and privacy policies say so. The fonts in the Style list are served by us, from your domain. The notice only asks permission for things that come from outside:

• a font pasted from Google Fonts, if you've added one;
• a Video widget added before 12 September 2026, whose thumbnail still comes from YouTube (later ones bring it from our server);
• Google Analytics or Google Tag Manager, if you connect them in Settings. When you connect them, the notice and the cookie policy update themselves.

If your site loads none of that, it has no cookie notice: there's nothing to ask, and the cookie policy says so. If it does, until the visitor accepts none of that loads, and they can accept one thing and not another. Their choice is saved in their browser, item by item, for 24 months; if you connect something new, the notice asks them again.

What details we need from you#

To write the texts we need the owner details: name or registered company name, NIF or CIF (Spanish tax ID), registered address and an email. We don't ask for them when you create your page, but the first time you publish, in the “Details for your legal pages” window (step by step in Publish your page). A business site isn't published without them. A personal page, or a site in the United States, only needs the email.

While they're missing you'll see a red dot on the editor's “Page” menu, next to the legal page that needs them. If you open that page, the window opens by itself so you can fill them in. Afterwards you change them in Settings › Business, which marks anything missing in red.

Some details the law only asks of some businesses can't be filled in under Settings yet: the Commercial Registry entry (volume, folio and sheet) if you're a registered company, and your professional association or authorisation if you practise a regulated profession or your activity needs one. Add them with “Use my own text” on the legal notice: it starts from our version, so you only need to add the line.

There's a separate field, “Email for data requests”, in case you want privacy enquiries to go to another address.

Reviewing them or using your own text#

1. In My page, open the “Page” menu and choose “Legal notice”, “Privacy policy” or “Cookie policy”. A window opens with the text that's on your site.
2. At the top you'll see whether it's “Automatic” (we keep it up to date) or “Your text”.
3. If you want to use your own, press “Use my own text”, paste it and press “Save”.
4. To go back to ours, press “Edit my text” and then “Back to the automatic version”.

If you use your own text, keeping it up to date is up to you: we no longer change it when your details or what your site loads change.

Who is responsible for what#

You are the controller of your customers' data; wiweb is the processor that handles it on your behalf, under the contract the GDPR requires: the Data Processing Agreement. How we protect that data is explained in Security & data.