Privacy policy

This policy explains in plain language how MURELEC 2018 SL (trading as Murmen) processes personal data in the Murmen service. Processing is carried out under the EU General Data Protection Regulation (GDPR) and applicable Spanish law.

1. Data controller

• Identity: MURELEC 2018 SL
• Address: Calle Doctor Fleming, 22 - BJ IX, Spain
• Email: israelgonzalbez@gmail.com

2. Data we process

Depending on your relationship with the service, we may process:

• Dashboard users: email, access credentials (stored securely), and data linked to the account and organization.
• End customers (WhatsApp or other business channels): name, phone number, appointments, and messages or conversations needed to provide the service.
• WhatsApp integration: technical identifiers, tokens, and connection credentials with Meta required to operate the organization’s WhatsApp Business number.

3. Purposes

• Provide and maintain the Murmen service (appointments, dashboard, bot).
• Authenticate users and secure multi-organization access.
• Handle support and requests (including data deletion).
• Comply with legal obligations where applicable.

4. Legal bases

Depending on the case, we rely on:

• Performance of a contract or pre-contractual steps (providing the service to organizations and users).
• Legitimate interest (security, reasonable operational improvement, abuse prevention), provided your rights do not override it.
• Legal obligation where the law requires it.

5. Recipients and processors

To provide WhatsApp Business we use Meta infrastructure (WhatsApp Cloud API). Hosting or other technical providers needed to run Murmen may also be involved, under appropriate safeguards. We do not sell your personal data.

6. Requests from public authorities

If a public authority requests personal data, we review that the request comes from a competent authority and is properly founded before we respond. If we consider it unlawful or disproportionate, we ask for it to be narrowed or we object, with legal advice if needed. We disclose only the data strictly necessary. We keep a record of the request, the response, the reasoning, and the parties involved.

7. Retention

We keep data for as long as needed to provide the service and to meet legal or security obligations. When you request deletion and it applies, we will process it as described in data deletion.

8. Your rights

Where applicable, you may exercise rights of:

• Access, rectification, and erasure.
• Objection and restriction of processing.
• Data portability, in the cases provided by the GDPR.

To exercise them, email israelgonzalbez@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Security

We apply reasonable technical and organizational measures to protect data (for example encryption of sensitive integration credentials and access control by organization). No system is 100% secure; if you detect an incident, contact us as soon as possible.

10. Data deletion

The detailed deletion procedure is in data deletion.

11. Changes

We may update this policy. We will publish the current version on this page with the last-updated date.