Websites and apps must comply with specific legal obligations. Failure to comply can lead to serious consequences, including significant fines, inspections, and potential legal actions.
For this reason, we have chosen to rely on iubenda, a leading company in the field that works with international lawyers and a team of specialized developers.
As certified partners, we have developed, together with iubenda, a solution designed to offer all our clients a simple and secure way to meet compliance requirements.
Overview of the main legal obligations for website and app owners
Privacy and Cookie Policy
Applicable regulations require that any website collecting personal data informs users through dedicated privacy and cookie policies.
Privacy policies must include key elements specific to your data processing activities, including:
- the identity and contact details of the data controller;
- what personal data is being processed;
- the purposes and methods of processing;
- the legal bases for processing (for example, consent);
- third parties that may access the data — including external tools (e.g., Google Analytics);
- a description of how the privacy policy is updated or modified;
- the effective date of the privacy policy.
The cookie policy, on the other hand, provides detailed information about the types of cookies installed by the website, any third parties involved — including links to their respective documents and opt-out forms — and the purposes of processing.
Can’t we use a generic document?
No: it is not possible to rely on generic documents, as your policy must accurately describe the actual data processing activities carried out by your website, including information about any third-party tools used (e.g., Facebook buttons or Google Maps).
What if my website does not process personal data?
It is very unlikely that your website does not process any personal data. Even a simple contact form or a traffic analysis system such as Google Analytics is enough to create the obligation to provide and display a privacy and cookie policy.
EU Cookie Law
In addition to providing a clear and easily accessible cookie policy, compliance with cookie regulations requires displaying an information banner upon a user’s first visit. This banner must link to a detailed cookie policy and allow users to accept or refuse the installation of cookies.
Most cookies — including those installed by tools such as social media buttons — can only be set after the user has given valid consent.
Furthermore, many third-party advertising networks may limit the reach of your ads if you do not have a cookie management system that complies with industry standards, thereby reducing your ability to generate advertising revenue.
What is a cookie?
Cookies are small files used to store or track certain information while a user browses a website. Today, they are essential for the proper functioning of websites. Additionally, many third-party technologies that we integrate — such as video widgets or analytics tools — rely on cookies.
