1. Introduction
This document explains what information the Munal website and admin panel ("we") collect from you, why, who we share it with, and what rights you have over your data. The service covers embassy appointment booking, administrative form requests (Jobcenter, WBS, and similar), and related immigration services in Germany.
2. What we collect
- Account: name, email, password (stored as a one-way hash, never recoverable).
- Profile: phone number, city, bio, profile photo (optional).
- Appointment/form requests: first name, last name, father's name, passport/ID number, date of birth, WhatsApp number, and any notes you enter on the request form.
- Payments: payment method, amount, and the payment proof screenshot you upload (which may show your bank account number or IBAN).
- Support messages and reviews: the text of anything you send in support chat or post as a review.
- Technical data: IP address, used only to prevent abuse (e.g. repeated failed login attempts).
3. Why we process it (legal basis)
- Contract performance: processing your appointment or form request requires the identity details needed to actually deliver the service.
- Consent: for actions like registration and submitting a request, we ask for your explicit consent via a checkbox.
- Legitimate interest: preventing fraud, abuse of the system, and keeping accounts secure.
4. Who we share it with
Your data is visible only to the Munal support team. For fast notification, a summary of new requests (including your name and form details) is sent via Telegram to the system administrator; Telegram is operated by Telegram FZ-LLC and may process data outside the EU. We never sell or rent your data to any advertising or analytics company.
5. How long we keep it
Your account and request data is kept for as long as your account is active. If you request account deletion, your personal data is deleted or anonymized within a reasonable timeframe, unless the law (e.g. accounting/tax obligations) requires longer retention.
6. Security
Your password is never stored as plain text. The connection to the site is encrypted via HTTPS. Access to the admin panel is restricted and protected. Uploaded images (such as payment proof) are stored in a protected location accessible only to you and the administrator.
7. Cookies and local storage
We use a single session cookie solely to keep you signed in — this is strictly necessary for the site to function and doesn't require separate consent. Your chosen language is stored in your browser's local storage so you don't have to pick it again next visit. No advertising or third-party tracking cookies are used.
8. Your rights
Under the EU General Data Protection Regulation (GDPR), you have the right to:
- access your personal data and receive a copy of it;
- request correction of inaccurate data (via "Edit profile");
- request deletion of your data;
- restrict or object to processing;
- withdraw consent at any time;
- lodge a complaint with the data protection authority in your country of residence.
To exercise any of these rights, contact us through the in-app support section.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent version.