Write to us Buy
Back to the blog

A legally compliant website.

The list of what a business website in Italy must show by law, from the VAT number to the privacy notice, with the extra rules for companies, regulated professionals and online stores.

By Alessandra De Luca · Updated

In short

A business website in Italy must show, in a way that is easy to find, who you are and how to reach you: name or company name, registered address, email, your REA or business register number, if you are registered, and your VAT number, which goes on the home page. If you collect personal data, for example through a form, you need a privacy notice; if you use non-technical cookies, a banner asking for consent. Companies, regulated professionals and online sellers have extra obligations.

For everyone: who you are and how to reach you.

Italian Legislative Decree 70/2003 requires anyone providing services online, which includes having a website for your business, to make this information “easily, directly and permanently accessible”:

  • your name or company name;
  • your address or registered office;
  • contact details to communicate quickly and directly, including an email address;
  • your registration number in the REA or the business register, if you are registered;
  • your VAT number.

The information must be kept up to date. It usually goes in the footer, so it’s visible from every page.

The VAT number on the home page is also required by Article 35 of Presidential Decree 633/1972. From 1 January 2027 that article is replaced by the new Consolidated VAT Act (Legislative Decree 10/2026): for the details, check with your accountant.

If you are a company.

Limited companies, such as an srl or spa, that have a website must also show there the same details required on their documents and correspondence (Article 2250 of the Italian Civil Code):

  • the registered office, the business register office and the registration number;
  • the share capital, as actually paid up and shown in the latest financial statements;
  • whether the company is in liquidation;
  • whether there is a sole shareholder.

If you are a regulated professional.

For regulated professions, such as lawyers, accountants, psychologists or architects, Decree 70/2003 adds: the professional body or register you belong to and your registration number, your professional title and the country that granted it, and a reference to the professional code of conduct. If your activity requires an authorisation, the details of the supervising authority must be shown too. How to build a website for a professional firm is explained on our page about websites for professional firms.

Privacy: the privacy notice.

If your website collects personal data, for example through a contact or booking form, Article 13 of the GDPR requires you to tell the person, at the moment they provide it:

  • who the data controller is and how to contact them;
  • why you collect the data and on what legal basis;
  • who it may be shared with;
  • how long you keep it;
  • what rights they have, including the right to complain to the data protection authority.

Cookies: the banner.

Under the Italian Data Protection Authority’s guidelines of 10 June 2021, cookies other than technical ones, such as those for detailed statistics or advertising, may only be used after obtaining consent. The banner must be closable with an X without accepting, and simply scrolling the page does not count as consent. All the details are in our privacy, cookies and banners guide.

Clear prices.

If you publish prices or rates, Decree 70/2003 requires them to be stated clearly and unambiguously, saying whether they include taxes and any delivery costs.

If you sell online.

  • Before the purchase, the Italian Consumer Code requires you to tell customers, among other things, who you are, the address where you are established, phone and email, the total price including taxes and the conditions for withdrawal.
  • The right of withdrawal: consumers have fourteen days to withdraw from a distance purchase without giving a reason, except in the cases provided for by law.
  • The EU ODR platform for online disputes was closed on 20 July 2025: the link that online stores used to show is no longer needed. If you have committed to using an alternative dispute resolution (ADR) body, however, you must say so on your website.
  • Accessibility: since 28 June 2025, e-commerce services for consumers must meet accessibility requirements. Microenterprises providing services are exempt, meaning fewer than 10 people and an annual turnover or balance sheet total of no more than 2 million euros. We explain it in our accessible website guide.

Other things to check.

  • Reviews: if you show reviews on your website, you must say whether and how you check that they come from real customers. More in our guide to reviews.
  • The CIN, if you host tourists: hotels, B&Bs, holiday homes and short-term rental apartments must show the national identification code (CIN) in every listing, wherever it is published (Decree-Law 145/2023, art. 13-ter): put it on your website too.
  • Chatbots and AI-generated images: since 2 August 2026 the EU AI Act requires transparency, as we explain in our guide The AI Act and your business.

The list, in short.

  1. Name or company name, registered address, email and contacts, REA or business register number (if registered).
  2. VAT number on the home page.
  3. For limited companies: paid-up share capital, sole shareholder, any liquidation.
  4. For regulated professionals: professional body, registration number, title and code of conduct.
  5. Privacy notice, if you collect data.
  6. Cookie banner, if you use non-technical cookies.
  7. Clear prices, with taxes and costs, if you publish them.
  8. For online sellers: pre-purchase information, withdrawal, any ADR body, accessibility.
  9. For tourist accommodation: the CIN.

With Aleryc.

On Aleryc websites, a privacy notice is always provided when the website collects data, while a cookie policy and consent banner are provided when the website uses non-technical cookies: to prepare them we rely on a specialised service that keeps them in line with the rules and that we activate in our own account, like the domain: they’re a separate item, priced in tiers by type, shown in the quote. The contact form shows the privacy notice and, if extra uses such as a newsletter are needed, a separate consent checkbox. Responsibility for what the law requires of your business remains yours, as the owner.

Sources.

Sources checked on 27 October 2026. This guide is for information only and is not legal advice: for your situation, ask your accountant, a lawyer or your trade association.

FAQ

The questions we get asked most.

Yes: in Italy it must be shown on the website’s home page, as required by Article 35 of Presidential Decree 633/1972, and it is part of the information Legislative Decree 70/2003 requires to be easily accessible. It usually goes in the footer, visible from every page.

Yes: a form collects personal data, such as name and email, so you need the notice required by Article 13 of the GDPR, saying who the controller is, why you collect the data, how long you keep it and what rights the person has.

No. The EU platform for online disputes was closed on 20 July 2025, so the link is no longer needed. You must still mention an ADR body if you have committed to using one.

Write to us

Tell us about your business. We’ll build the rest together.

Write to us in English by email or WhatsApp: we’ll listen, ask you a few questions and tell you honestly what we would do in your place. Video calls and phone calls are in Italian.

Write to us