What a business website in Slovakia must legally include: a 2026 checklist

Details about you: what the law tells you to show

Act 22/2004 on electronic commerce (Section 4(1)) requires a service provider on a website to give recipients a set of details. The list is open (“najmä”, “in particular”). The details must be “ľahko a trvalo prístupné”, easily and permanently accessible (Section 4(3)): the footer of every page and a “Contact” page, not small print three clicks deep.

• Legal entity: name (obchodné meno) and registered seat (sídlo). Individual: name, place of business and residential address
• VAT ID (DIČ) if you are a VAT payer
• E-mail address and phone number
• The register that entered you and your registration number
• The supervisory authority your activity is subject to (name and address)
• Regulated professions: also the professional chamber, title and professional rules (Section 4(2))

Table: what, for whom and where on the site

Cookies: consent, not just a banner

Act 452/2021 on electronic communications (Section 109(8)) allows storing information on a user's device or accessing it only with “preukázateľný súhlas”, provable consent. Exception: technical storage needed to transmit a message over a network, or strictly necessary for a service the user explicitly requested.

In practice, a site using only what is technically necessary (a language choice, say) needs no banner. Advertising pixels, social widgets and external analytics with cookies require consent, and those scripts must not load before it. The law does not define borderline cases, so check them with a lawyer.

Our websites use analytics without cookies and personal data, so no banner is needed until you add advertising pixels (see our privacy notice).

Forms and the data processing notice

As soon as someone leaves a name and phone number, you process personal data. GDPR and Section 19 of Act 18/2018 require you to tell the person, when you collect the data:

• who you are and how to contact you (and the data protection officer, if appointed)
• the purpose of processing and the legal basis
• the legitimate interests, if that is the basis
• who receives the data and whether it leaves the EU
• the retention period or the criteria for it
• the person's rights: access, rectification, erasure, restriction, objection, portability, withdrawal of consent, a complaint to the authority

Online shops and selling to consumers

If you sell to consumers (individuals acting outside their business), Act 108/2024 on consumer protection applies too. Before an order, state clearly among other things: main features, the seller's name and address, a phone number, the total price with delivery and other charges, payment and delivery terms, liability for defects, contract duration and termination (Section 5), plus an e-mail address and a withdrawal notice with the model form (Section 15). Name the alternative dispute resolution body in the terms and on the site (Section 5(3)).

Withdrawal: a consumer may withdraw from a distance contract within 14 days (for a service, from conclusion of the contract, Section 20). Exception for services: fully performed, begun with the consumer's explicit consent and acknowledgement of losing the right (Section 19). For contracts concluded through an online interface, Section 20a adds a prominent, permanently available button labelled “odstúpiť od zmluvy tu” or similar.

Act 22/2004 (Section 5) also requires that customers can correct mistakes before sending an order and that you confirm it electronically without delay. Between businesses these rules apply only if the parties have not agreed otherwise (Section 5(7)).

Newsletters and a one-evening check

Act 22/2004 (Section 4(6)) prohibits sending commercial communications by e-mail unless the recipient asked for them in advance. So the “subscribe” box must not be ticked by default.

Check on a smartphone in a private window:

• The footer holds every item from the table and the links work
• Before consent, developer tools show no requests to advertising or social domains
• A link to the data processing notice sits next to the form
• Terms and the withdrawal notice are shown before payment, not after
• Repeat the check every six months: laws change

Questions and answers

Zdroje

• Act No. 22/2004 Z. z. on electronic commerce, Sections 4, 5, 7 – static.slov-lex.sk/static/SK/ZZ/2004/22/ (verified 12.10.2026)
• Act No. 452/2021 Z. z. on electronic communications, Section 109(8) – static.slov-lex.sk/static/SK/ZZ/2021/452/ (verified 12.10.2026)
• Act No. 18/2018 Z. z. on personal data protection, Section 19 – static.slov-lex.sk/static/SK/ZZ/2018/18/ (verified 12.10.2026)
• Regulation (EU) 2016/679 (GDPR), Articles 12–22, referred to by Act 18/2018 (verified 12.10.2026)
• Act No. 108/2024 Z. z. on consumer protection, Sections 5, 15, 19, 20, 20a – static.slov-lex.sk/static/SK/ZZ/2024/108/ (verified 12.10.2026)
• This material is informational and does not replace legal advice.

Articles and guides

Other services