Hi! For a site targeting France, the core obligations from our knowledge base are: - **Mentions légales** (Art. 6 LCEN + L111-1 C.conso): company name, address, email, phone, SIRET/RCS, capital, VAT number, host name. - **Privacy policy** (Art. 13 RGPD): controller identity, purposes, legal basis, recipients, retention periods, data subject rights. - **Cookie banner with prior consent** (Délibération CNIL 2020-092): refusing must be as easy as accepting — Google was fined 150M€ and Amazon 35M€ by the CNIL precisely on that point. - **If you sell online**: 14-day withdrawal right (L221-18), legal guarantees, a consumer mediator (L612-1), Omnibus rules on struck-through prices (lowest price of the last 30 days) and verified reviews — plus, from **19 June 2026**, a dedicated online withdrawal function (L221-21 / D221-5); without it the withdrawal period is automatically extended by 12 months. - **Security headers**: HTTPS, HSTS, CSP, X-Frame-Options. I only answer from our knowledge base (RGPD, consumer law, web security) and I'm not a substitute for legal advice. If you share your URL, I can run the free scan and tell you exactly where you stand.
← Lancer mon audit gratuit