Every Spanish website that collects personal data is legally required to comply with the RGPD, the LOPDGDD, and the LSSI-CE \u2014 and the AEPD is actively sanctioning sites that fall short. Yet most WordPress site owners are still relying on a patchwork of free cookie banners, manually drafted legal pages that go stale, and zero documentation of what users actually consented to. When an inspection arrives or a user exercises their data rights, that patchwork unravels fast. The cost is not just a fine \u2014 it is the time, stress, and reputational damage of scrambling to prove compliance you never properly built.<\/p>\n
[B] Easy RGPD & Cookies (Espa\u00f1a)<\/strong> is the only all-in-one WordPress plugin built specifically for the Spanish legal framework. It auto-creates your five mandatory legal pages from your company data, deploys an AEPD 2024-compliant cookie banner with granular category toggles and equal-hierarchy buttons, blocks third-party scripts before consent is given, scans your site for third-party cookies automatically, and records a cryptographically verifiable audit trail of every consent action \u2014 all without a single external SaaS subscription. Everything runs on your own server, under your own control, with no monthly fees for the compliance infrastructure itself.<\/p>\n Freelancers and agencies building sites for Spanish SMEs, law firms, e-commerce stores, healthcare providers, and public-sector clients will find this plugin covers the full compliance stack in one activation. WooCommerce stores using Google Analytics, Meta Pixel, or Stripe get script blocking and consent gating out of the box. Content sites embedding YouTube or Vimeo get placeholder replacements until the visitor grants marketing consent. Membership sites and lead-generation funnels get a structured ARCO+ rights form that accepts identity verification documents, stores them securely, and auto-deletes them when the request is closed \u2014 exactly as RGPD data minimization requires.<\/p>\n The plugin is built on WordPress 6.0+ and PHP 8.1+, tested up to WordPress 6.8, and designed to coexist peacefully with caching plugins, Elementor, Divi, and other page builders. The consent decision is evaluated client-side from a first-party cookie, so full-page caching never breaks the banner logic. The secure document upload zone uses Managing compliance at scale stops being a burden when the audit trail does the work for you. Every consent action \u2014 accept, reject, customize, revoke \u2014 is logged with a canonical JSON snapshot of the exact banner the user saw: button text, category labels, accent color, locale, and a SHA-256 integrity hash. If the AEPD asks what banner version user X encountered on date Y, you can export a print-ready PDF of that specific consent record in seconds. The same PDF export covers individual ARCO+ rights requests with space for a signed response, and full consent logs by date range with action totals. No external dependencies, no third-party PDF service \u2014 pure semantic HTML rendered via The automatic cookie scanner crawls your public URLs, cross-references a built-in catalog of over a dozen major third-party services \u2014 Google Analytics, Meta Pixel, Hotjar, Microsoft Clarity, LinkedIn Insight Tag, TikTok Pixel, YouTube, Vimeo, Cloudflare, Stripe, PayPal, and more \u2014 and proposes inventory rows and block-list entries without overwriting anything you have configured manually. Consent logs older than the configured retention period (default 24 months, the AEPD maximum) are purged automatically by a background cron job. You stay lean, compliant, and audit-ready without lifting a finger.<\/p>\n Compliance is not a one-time checkbox \u2014 it is an ongoing operational commitment. [B] Easy RGPD & Cookies gives you the infrastructure to meet that commitment confidently: structured processes for handling rights requests, documented proof of every consent, legally current page content you can restore in one click, and a plugin that is actively maintained against the latest AEPD guidance. Stop patching compliance together from free tools that were never designed for the Spanish legal framework. Deploy one plugin, cover the full obligation, and get back to building your business.<\/p>\n","protected":false},"excerpt":{"rendered":" Full RGPD, LOPDGDD & LSSI-CE compliance for Spanish WordPress sites \u2014 legal pages, AEPD 2024 cookie banner, ARCO+ rights form, and consent audit in one plugin.<\/p>\n","protected":false},"featured_media":1779343573,"template":"","plugin_category":[178,177,176,58],"use_case":[42,78,179,181,180],"license_type":[182,71],"compatibility":[55,45,155,56,184,183],"class_list":["post-1779343453","baqueiro_plugin","type-baqueiro_plugin","status-publish","has-post-thumbnail","hentry","plugin_category-cookies","plugin_category-legal-compliance","plugin_category-privacy-gdpr","plugin_category-security","use_case-agency","use_case-e-commerce","use_case-healthcare","use_case-membership-sites","use_case-publishing","license_type-annual-subscription","license_type-commercial","compatibility-divi","compatibility-elementor","compatibility-litespeed-cache","compatibility-woocommerce","compatibility-wordpress-multisite-single-site-activation","compatibility-wp-rocket"],"_links":{"self":[{"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/baqueiro_plugin\/1779343453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/baqueiro_plugin"}],"about":[{"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/types\/baqueiro_plugin"}],"version-history":[{"count":1,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/baqueiro_plugin\/1779343453\/revisions"}],"predecessor-version":[{"id":1779343454,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/baqueiro_plugin\/1779343453\/revisions\/1779343454"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/media\/1779343573"}],"wp:attachment":[{"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/media?parent=1779343453"}],"wp:term":[{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/plugin_category?post=1779343453"},{"taxonomy":"use_case","embeddable":true,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/use_case?post=1779343453"},{"taxonomy":"license_type","embeddable":true,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/license_type?post=1779343453"},{"taxonomy":"compatibility","embeddable":true,"href":"https:\/\/baqueiro.es\/store\/wp-json\/wp\/v2\/compatibility?post=1779343453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}.htaccess<\/code> and web.config<\/code> deny-all rules plus nonce-protected admin download links \u2014 no identity document is ever exposed via a public URL. IP addresses are stored only as a salted SHA-256 hash, satisfying the AEPD’s pseudonymization requirements while still proving consent uniqueness.<\/p>\n@media print<\/code>.<\/p>\n