Digital Contract Formation & Validity in Spanish Banking Law - This is where Spanish law is most advanced in EU after eIDAS and is NOT same as Indian IT Act.

Spanish banking contract is not valid unless it passes 5 validity tests under Código Civil + Código de Comercio + Ley 6/2020 + eIDAS.

1. Legal Framework - 5 Layers

Layer 1: Código Civil - General Contract - Art 1261-1270
For valid contract need: Consentimiento, Objeto cierto, Causa lícita. For digital: Consentimiento = click = valid IF informed.

Layer 2: Código de Comercio Art 50-63 - Banking as Mercantile Contract
Banking contract is contract of adhesion - Art 5 LCGC Ley 7/1998.

Layer 3: Ley 6/2020 Reguladora de Servicios Electrónicos de Confianza [Transposes eIDAS EU 910/2014]

• Electronic signature = 3 levels: Simple, Advanced, Qualified
• Qualified Electronic Signature [QES] = equivalent to handwritten signature - Art 3.12 eIDAS + Art 24 Ley 6/2020
• For banking: QES or Advanced + 2FA = valid

Layer 4: Real Decreto-ley 19/2018 - PSD2 - Payment Services
Art 44-46: Digital payment contract must have prior information + explicit consent.

Layer 5: Orden EHA/2899/2011 + Circular 5/2012 Banco de España - Transparency
Pre-contractual info - FIPRE, FIPER - mandatory 3 days before signing for mortgage, 1 day for consumer credit.

If any layer fails, contract is anulable or nulo.[voidable]

2. The 5 Validity Tests for Digital Banking Contract in Spain

Test 1: Consentimiento Digital - Is Click Valid?

Art 1262 CC second paragraph - modified 2022: Contract by automatic device: Consent manifested by electronic means is valid when there is agreement.

Requirements per STS:

• Double Click: STS 2021 - For banking, single click "Accept" NOT valid if terms not scrollable + downloadable. Need checkbox + scroll + download + second click "Sign".
• No pre-ticked: TJUE 2022 + Spanish LCGC Art 8: Pre-ticked boxes invalid.
• Language: Must be in Spanish or co-official language of domicile - Art 8 Orden EHA/2899.

Case Law 1: Click-Wrap Invalid - Tribunal Supremo STS 745/2015 + STS 102/2021

Wizink Bank - Revolving Credit via App
Customer accepted revolving credit via app with one click. No FIPRE, no scrollable terms.

Tribunal Supremo held: Contract voidable for lack of informed consent. App design that hides APR behind hyperlink violates transparency. Bank must prove customer had real opportunity to read - logs of time spent on page.

Doctrine: "Consentimiento informado digital requiere prueba de trazabilidad" - Bank must have log: IP, timestamp, time spent, device, downloaded PDF hash.

Test 2: Forma - Is Electronic Signature Valid?

Spanish banking law does NOT allow simple signature for high-value contracts.

Hierarchy:

• Firma Simple: Click, email, SMS OTP - Valid only for low-risk: balance inquiry, <€3,000 transfer per RD 19/2018 Art 45.
• Firma Avanzada: Biometric + OTP + device binding - Valid for consumer loan <€15,000 - Art 26 eIDAS.
• Firma Cualificada [QES]: Certificate from Qualified Trust Service Provider [FNMT] + secure device - Mandatory for: Mortgage [Ley 5/2019 Art 14], Investment, Guarantee >€10,000.[Camerfirma][MiFID]

Case Law 2: SMS OTP NOT Valid Signature for Loan

Audiencia Provincial Madrid STS 2020 - Cetelem Bank
Bank granted €20k loan via SMS OTP only.

Court: SMS OTP = simple signature, insufficient under eIDAS for credit contract >€3k. Requires Advanced signature per Circular 5/2012. Contract anulable - bank cannot claim principal + interest, only principal as unjust enrichment.

This changed Spanish banking: Now all banks use QES via Video ID - e.g., CaixaBank uses FNMT + selfie video.

Case Law 3: TJUE C-693/19 - Qualified Electronic Signature Equivalence

CJEU held: QES valid across EU, member state cannot require handwritten for banking. Spanish courts must accept QES from other EU QTSP.

Test 3: Información Precontractual - FIPRE/FIPER

Orden EHA/2899/2011 Art 9-12:

For digital banking, bank must deliver:

• FIPRE [Ficha de Información Precontractual]: General info, available on web
• FIPER [Ficha de Información Personalizada]: Personalized, binding offer valid 14 days - Must be delivered via durable medium - PDF with QES, not just screen.

For mortgage: Ley 5/2019 de Crédito Inmobiliario Art 14-15: Notary must verify FIPER delivered 10 days before signing. Digital mortgage without notary = NULO DE PLENO DERECHO.

Case Law 4: Lack of FIPER = Nullity

STS 2018 - Banco Santander - Mortgage via Digital Channel
Bank sent mortgage contract via email without FIPER, signed via QES remotely, no notary meeting.

Tribunal Supremo: Nullity under Art 21 Ley 5/2019. Mortgage contracts require notarial deed - even digital - and FIPER. Digital signature cannot replace notary for mortgage. All digital mortgages in Spain still require videoconference with Notary per Ley 6/2020 Art 10.

STS 2023 - Floor Clause + Digital Lack of Transparency
Same doctrine: If digital contract does not show TAE [APR] in prominent 1.5x font per Circular 5/2012, clause is abusive per Directive 93/13 - void.

Test 4: Incorporation of General Conditions - LCGC

Ley 7/1998 Condiciones Generales de la Contratación Art 5,7,8:

For digital banking T&Cs to be valid:

1. Must be accessible before contract - checkbox "I have read"
2. Must be legible - font >1.5mm, not light grey on white - STS 2020 deems unreadable T&C invalid
3. Must not be abusive per RDL 1/2007 Art 82-91

Case Law 5: Abusive Digital Clause - Tribunal Supremo STS 628/2015 - BBVA

BBVA digital account clause: "Bank may modify interest unilaterally via email notification". STS: Abusive - Art 85.3 TRLGDCU - requires individual notification + 2 months notice + right to terminate without cost - per PSD2 Art 54.

All Spanish banks updated apps after this: Now push notification + 2 months.

Test 5: Proof & Durable Medium

Art 59.2 TRLGDCU + Art 7.1 eIDAS: Bank must provide contract in durable medium that allows storage and unchanged reproduction.

Email PDF = durable. Web page that changes = NOT durable.

Case Law 6: No Durable Medium = No Consent

Audiencia Provincial Barcelona 2022 - ING Direct
ING sent contract link that expired in 30 days. Customer could not retrieve after.

Court: Link ≠ durable medium. Bank must send PDF attached or allow download in personal area with permanent storage. Contract not enforceable until durable copy provided.

3. Specific Banking Products - Different Validity

4. PSD2 - Payment Consent Validity

RD-Law 19/2018 Art 44: Payment transaction authorized only if payer gave consent.

Consent via digital banking app valid IF:

• SCA - Strong Customer Authentication: 2 factors: Knowledge [PIN], Possession, Inherence[mobile][biometric]
• Dynamic linking: Amount + payee must be linked to authentication

Case Law 7: TJUE C-287/19 DenizBank - PSD2 Burden of Proof

If customer denies authorization, bank must prove: transaction authenticated, accurately recorded, no technical failure. Simply producing log that correct PIN used insufficient.

Spanish courts apply: Bank must produce SCA logs: device ID, biometric, etc.

Case Law 8: Audiencia Provincial Madrid 2022 - Bizum - Consent Error

Customer thought he authorized receipt of €900 but authorized sending.

Court: Consent vitiated by error per Art 1266 CC. Bank failed dynamic linking - screen did not clearly show "You are sending". Contract voidable for error. Bank liable.

5. Smart Checklist for Valid Digital Banking Contract in Spain

To be valid under Spanish law, your digital contract must have:

1. Pre-contract: FIPRE + FIPER PDF with hash + 10 days for mortgage, 1 day for consumer
2. Authentication: QES for high value - use FNMT or its video ID solution - not SMS alone
3. Consent proof: Logs: IP, timestamp, time on page > 30 sec, scroll depth > 80%, PDF download, double click
4. Durable medium: Send PDF with QES timestamp via email + store in app "My Contracts" permanent
5. LCGC compliance: Font readable, no pre-ticked, TAE prominent
6. Right to desist: 14 days for distance contract per Art 102 TRLGDCU - button in app

If you are Indian company offering digital banking to Spanish customers [e.g., via passport], you must comply with both - RBI data localization + eIDAS QES.