Choose which cookies you accept. You can change this whenever you like from ‘Cookie settings’ at the bottom of the page.

NecessaryAlways on

They store what you choose in this panel. Without them, the website would not remember your choice.

They count how many people visit the website and which pages they look at. They are set by Google Analytics.

Cookie policy

Ask for details

Privacy policy

Last updated: October 2026.

This is a translation of the Spanish original. If the two differ, the Spanish version prevails.

What data we process when you write to us from onlytap.es, what we use it for and what rights you have.

In short

Who
Volcano MKT (Miguel Monterrey Varela, tax ID 42192719R), which provides the OnlyTap service. You can write to us at hola@volcanomkt.in.
What for
To answer your message, prepare a proposal for you and keep the website secure.
On what basis
Your consent when you tick the box on the form and the pre-contract steps you ask us for.
Who with
Nobody, unless the law requires it. The hosting and email providers only process the data on our behalf.
Your rights
Access, rectification, erasure, objection, restriction and portability, by writing to hola@volcanomkt.in.

This policy covers the onlytap.es website and its contact form, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). It does not cover the accounts created at app.onlytap.es.

1. Data controller

Identity
Miguel Monterrey Varela (trade name: Volcano MKT)
Tax ID (NIF)
42192719R
Address
Av. Carlos Francisco Lorenzo Navarro, 56, 38760 Los Llanos de Aridane (Santa Cruz de Tenerife), Spain
Email
hola@volcanomkt.in
Phone
+34 611 775 077
Website
onlytap.es

2. What data we process

Only what we need for each purpose:

  • From the form: your name, the name of your business, your email address, your phone number if you give it to us and what you tell us about what you need.
  • From the conversation: the emails we exchange afterwards to prepare the proposal.
  • Technical: IP address, browser type and pages requested, which the server logs for security.
  • Browsing: if you accept the analytics cookies, which pages you visit.

We do not ask for special categories of data. If you give us someone else’s data, for example someone on your team, make sure they know and agree.

3. What we use it for

  • To answer your message and prepare a proposal for your business.
  • If you order the done-for-you service, to prepare it and manage the order.
  • To meet our legal, tax and accounting obligations.
  • To keep the website secure and stop automated submissions.
  • To count visits to the website, only if you accept the analytics cookies.

We do not use your data to send you advertising.

  • Consent: answering the messages sent through the form, which you accept by ticking the box, and using analytics cookies (Article 6(1)(a) GDPR). You can withdraw it at any time, without affecting what was processed before.
  • Pre-contract steps and contract: preparing the proposal you ask us for and, if you accept it, the order (Article 6(1)(b) GDPR).
  • Legitimate interest: keeping the website secure and preventing fraud and spam (Article 6(1)(f) GDPR).
  • Legal obligation: meeting tax and accounting obligations if we work together (Article 6(1)(c) GDPR).

5. How long we keep it

  • Messages that do not lead to an order: 12 months from the last contact, in case you want to pick up the conversation again. After that they are deleted.
  • Contract data: 5 years from the end of the contract (Article 1964 of the Spanish Civil Code).
  • Tax data: 4 years from the end of the deadline for filing each return (Spanish General Tax Act).
  • Invoices and accounting records: 6 years (Article 30 of the Spanish Commercial Code).

After those periods, the data is deleted or anonymised.

6. Who we share it with

  • Public authorities, when a law requires it.
  • Arsys, which hosts the website and the server that emails us the form, with servers in Spain.
  • Google, which provides our email.
  • Google, if you accept the analytics cookies. What data it receives and what for is explained in the cookie policy.

All of them act as data processors, with a signed contract. Google may process data outside the European Economic Area; when it does, it uses the safeguards the GDPR requires: the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

7. Your rights

You can exercise these rights at any time:

  • Access: find out what data of yours we process.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data.
  • Objection: object to us processing your data.
  • Restriction: ask us to restrict the processing.
  • Portability: receive your data in a structured format.
  • Withdrawal of consent: at any time, for everything based on it.

To exercise them, write to us at hola@volcanomkt.in saying which right you want to exercise. If we have reasonable doubts about your identity, we will ask you to prove it. We will reply within one month and will not charge you anything unless the requests are clearly unfounded or excessive.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency, AEPD (www.aepd.es (opens in a new tab)).

8. Minors

This website is not aimed at children under 14 and we do not knowingly process their data. If you think a minor has sent us theirs, write to us and we will delete it.

9. Security

We apply technical and organisational measures to protect your data, including:

  • Encrypted communications (TLS).
  • Access control to the systems.
  • Access to the data only for those who need it for their work.
  • Regular backups.
  • Regular updates of software and systems.
  • A form protected against automated submissions.

10. Changes to this policy

We may update this policy because of changes in the law or in the way we work. You will see the date of the latest version at the top of the page. If a change affects how we use data we already hold, we will let you know before applying it.