Business obligations, registers and licences · Czechia and Slovakia
Cookies and website legal compliance
Most websites have a banner that does not reflect what the website actually does. Scripts run before consent, categories are inaccurate and the reject option is hidden. We examine your website's actual behaviour, structure consent under the Electronic Communications Act and GDPR, and check after implementation that the documents and website match. For Slovak and Czech audiences.
- Audit of actual website behaviour
- Slovak and Czech rules addressed together
- Post-implementation checks included
What we'll do for you
The service includes an audit, wording, developer instructions and post-implementation checks.
Select an item to see the details.
-
Website audit
We identify the cookies and scripts the website actually stores and runs, their sequence and legal basis, including third-party tools the operator may not even know about.
-
Consent banner and wording
Categories, banner wording and a cookie policy under Act No. 452/2021 Z. z. and GDPR, with genuinely equivalent accept and reject options and no manipulative patterns penalised by regulators.
-
Developer instructions
Technical instructions for your agency or developer specifying which scripts to link to each consent category and how the banner should work. Clear to IT and supported by legal advice.
-
Post-implementation checks
After implementation, we examine the website again and confirm that its behaviour matches the documentation. Only then is the work complete.
Deliverablea cookie banner and documentation matching the website's actual behaviour, with recommendations implemented and checked
How it works
Does this process fit your matter? Describe it to the attorney →
- Auditday 0
We examine the website to establish what is stored, when and on what basis.
- Wording and instructions
We prepare the banner, cookie policy and developer instructions.
- Implementation and checkssubject to your IT team's schedule
Your developer implements the changes; we check them and confirm compliance.
A cookie banner is your company’s most visible legal document: every website visitor sees it. Yet it is also often the most carelessly prepared — copied from a competitor, configured by an agency without legal instructions or inconsistent with the website’s actual behaviour.
Our service is focused and clearly defined: we measure what the website actually does, establish the legal framework and check the result. No hundred-page documentation package — just what the law requires and what stands up to scrutiny.
No-obligation enquiry
Ready to start?
Send us an enquiry. We usually reply within 24 hours with a price confirmation and next steps. The first 30-minute consultation is free and commits you to nothing.
- 1Send your enquiry via this form
- 2Usually within 24 h you get a price confirmation and plan
- 3We start work only after your approval
Not keen on calls or email? Message us on WhatsApp →
Prefer to book a time right away? Book a consultation →
Or email us about this matter.
What clients ask
Didn’t find your question? Ask us directly →
Which cookies require consent?
All cookies that are not necessary for the website to function, particularly analytics, marketing and personalisation cookies. Consent must be demonstrable and obtained in advance; necessary technical cookies do not require it. This follows from Act No. 452/2021 Z. z. on Electronic Communications together with GDPR.
Is a banner saying 'by continuing you consent' sufficient?
No. Consent requires an affirmative action — continuing to browse and pre-ticked boxes do not constitute consent. The banner must make rejection as easy as acceptance. Hiding the reject option behind a second click is among the practices supervisory authorities criticise most often.
We have a banner supplied by our website provider. Is that not enough?
The technical solution is half the task. The other half is whether the banner reflects what the website actually does and whether its wording is legally correct. Our audits regularly uncover scripts running before consent or categories that do not reflect reality. That is why we begin by measuring actual website behaviour rather than reading the banner.
We also sell to the Czech Republic. Are the rules different there?
The basic rule is the same in both countries: consent before storing non-essential cookies. However, the details and supervisory practice differ. We prepare wording for both countries together. As the firm's lawyer is admitted to both Bars, you do not need another lawyer for the Czech version.
What happens if we do not address cookies?
Supervisory authorities can impose fines under the Electronic Communications Act and GDPR and order remedial action. In practice, the first step is often a request to remedy the position, but competitors and informed users increasingly submit complaints, so assuming nobody is watching is less and less realistic. Remediation after a regulatory request always costs more than getting it right beforehand.
Legal Q&A
Common questions on this topic
-
Is an accept-or-leave cookie banner lawful?
No. Cookie consent must satisfy the GDPR and be freely given; accept or leave is not a real choice. The European Data Protection Board's consent guidelines expressly state that access to content must not depend on cookie consent. A banner therefore needs an equally prominent reject button on its first layer, and the website must work after rejection. The paid alternative, pay or consent, remains disputed.
Read the answer -
Nobody enters a name or email on our website. Do we need to address the GDPR at all?
Generally yes, for three reasons. Under EU case law, a visitor's IP address is personal data if you can identify them with help from others, as is usually the case with ordinary server logs. The GDPR expressly treats pseudonymous identifiers, such as analytics cookies, as personal data: anonymity must be achieved rather than assumed. Embedded third-party scripts may create joint controllership where you jointly determine the purposes and means of specific operations. Depending on the setup, the third party may instead be a processor or an independent controller. The first question is therefore technical: what does your website load in the background?
Read the answer -
What must appear on a company website even if we do not sell through it?
Generally, these duties apply. A company website is an information society service even without sales if it promotes the business. The Electronic Commerce Act requires the business name and registered office, email and phone, register and entry number, tax identification number if VAT-registered, and the supervisory authority's name and address. The Commercial Code adds the company identification number and legal form. Details must be easily and permanently accessible, not supplied only on request. GDPR transparency and cookie rules also apply.
Read the answer
Further reading
A cookie banner for a Slovak and a Czech website: one standard, two statutes
Both the Slovak and the Czech electronic communications statutes now require consent before non-essential cookies are stored. The wording differs in detail and the Czech Republic moved to consent only in 2022. This article explains what the two regimes have in common and what to bear in mind for a website or e-shop serving both countries.
Read more →
Cookie consent: how to prove it, when to renew it and how to allow it to be withdrawn
A cookie banner is not enough if the controller cannot evidence who consented to what. This article explains what provable consent means under Slovak and Czech law and the GDPR, what the visitor must know before clicking, and how withdrawal should work. For website and e-shop operators.
Read more →
When an AI user becomes its provider: roles under the AI Act
The AI Act allocates obligations by role, not by who wrote the code. A company that has a chatbot built on someone else's model, sells an AI product under its own brand or uses a general-purpose tool for a sensitive purpose may become a provider with all the attendant obligations. This article explains where the line runs and what follows from it for supplier contracts.
Read more →