How We Collect Customers' Personal Data

One Crna Gora collects personal data of its customers through various methods. In most cases, information is obtained directly from customers during the contract signing process and throughout the contract execution. Certain data is generated automatically during the use of services provided by One Crna Gora, and sometimes third parties provide us with data or One Crna Gora receives data from other sources.

We collect data directly from customers:

•  In the process preceding contract signing – when a customer expresses the desire to sign a contract with One Crna Gora.
• When concluding a subscription contract for mobile telecommunication services with One Crna Gora.
• During the registration of a prepaid number.
• When entering into contracts for the purchase of devices or any other contracts.
• During the execution of contract provisions, contract annexes, amendments, or contract terminations (for the purpose of fulfilling customer requests, responding to customer complaints, payment of bills, prepaid credit top-ups, etc.).

Data that are automatically generated during the use of One Crna Gora's services include traffic data and approximate location data (e.g., during phone calls, sending SMS messages, internet sessions, etc.). This also includes aggregate traffic data.

Below are the data obtained from third parties. These are data that:

• Are collected for the purpose of providing the "number portability" service from One Crna Gora's network to One Crna Gora's network. In these cases, data is provided by the "donor" or "recipient" of the number.
• Are collected when providing roaming services on the networks of relevant roaming partners (i.e., mobile operators whose networks were used by a customer using roaming services). This traffic data is automatically generated and sent to One Crna Gora for billing purposes.
• Arise after the provision of digital services by partners with whom One Crna Gora collaborates or value-added services.
• Arrive during the process of collecting customer debt. In such cases, data is obtained from enforcement agencies/courts.
• Are collected from other legal entities based on consent to share data of the individuals to whom the data pertains.
• Are collected from other legal entities, specifically other telecommunications service providers, based on a legitimate interest aimed at protecting the operator's business and preventing misuse.