Which laws Velia checks

Velia only checks what any visitor can see: public pages, server headers and the certificate. The laws applied depend on the country of the website owner: in Spain and Italy, national and EU laws; in the rest of the European Union, EU laws.

In the report, each legal issue states the law it comes from, with a link to the official text.

European Union (every EU website)

• Reglamento (UE) 2016/679 (RGPD), arts. 13 y 14. That the website links to a privacy policy and that forms explain how data is processed.
• Directiva 2002/58/CE (ePrivacy), art. 5.3. That no cookies or tracking tools are set before consent, and that there is a banner and a cookie policy.
• Directiva 2000/31/CE (comercio electrónico), art. 5. That the website identifies its owner: a direct contact with an email address, a tax number with a valid format and the same details on every legal page. The legal notice page is also searched for in other languages (Impressum, mentions légales…).
• Reglamento (UE) 2016/679 (RGPD), art. 32. Security measures visible from outside: https, certificate, supported software and security headers.
• Directiva 2011/83/UE (derechos de los consumidores), arts. 6 y 9. In online stores (Shopify, WooCommerce, PrestaShop, Magento): terms of sale, a returns policy with the 14-day right of withdrawal and prices that state whether taxes are included.
• Reglamento (UE) 2024/3228 (derogación de la plataforma ODR), art. 1. That the website no longer links to the EU online dispute resolution (ODR) platform, closed on 20 July 2025.

Spain

• Ley 34/2002 (LSSI-CE), art. 10. That there is a linked legal notice with name or company name, address, a valid tax ID, email and, for companies, registry details; the same details in the legal notice, privacy policy and home page; no unfilled template placeholders; professional association and membership number for regulated professions.
• Ley 34/2002 (LSSI-CE) y Guía sobre el uso de las cookies de la AEPD, art. 22.2. Consent before non-essential cookies, banner and cookie policy.
• Ley Orgánica 3/2018 (LOPDGDD), art. 11. That the website links to the privacy policy.
• Real Decreto Legislativo 1/2007 (TRLGDCU), arts. 97 y 102-108. In online stores: terms of sale, a returns policy with the 14-day right of withdrawal and the final price including taxes.

Italy

• DPR 633/1972, art. 35. That the VAT number (partita IVA) appears on the home page and has a valid check digit.
• D.Lgs. 70/2003, art. 7. That the website shows the registered office, a contact email and, for companies, the Companies Register (REA) entry; the same details on every legal page.
• Codice civile, art. 2250. For companies: registered office, register number and, for S.r.l. and S.p.A., the share capital.
• D.Lgs. 196/2003 (Codice privacy) e Linee guida cookie del Garante (10/6/2021), art. 122. Consent before non-essential cookies, banner and cookie policy.
• D.Lgs. 206/2005 (Codice del Consumo), artt. 49 e 52-59. In online stores: terms of sale, a returns policy with the 14-day right of withdrawal and the final price including taxes.

What we do not check

• What cannot be seen from outside: contracts, internal records, data processing agreements or server configuration.
• Whether the owner’s details are true: we check that they are there and have a valid format, we do not compare them with public registers.
• Accessibility is checked as good practice, following the WCAG guidelines, without citing laws: obligations depend on company size and on who it sells to, which cannot be known from outside.
• Outside the European Union we do not check the legal part: only security and accessibility.

This analysis is for guidance only and does not constitute legal advice.