Privacy Policy

Data controller Communication and Media Commission of Republic of Iraq (later Company) is committed to enhancing privacy and complies with data protection laws applicable in Republic of Iraq and the EU General Data Protection Regulation (GDPR).

Why Do We Collect Data?

Company is Iraq’s telecommunication regulator authority. CMC network quality – App helps its users to monitor network quality of their chosen telecommunication operator in Iraq and send network performance statistics and user generator performance tickets Company to help them to regulate and improve telecommunication networks in Iraq.

How Do We Collect Data?

We collect data through use of CMC network quality – App (later Service) running in your device.

You can modify the positioning settings of your device from the device settings by changing or disabling positioning methods or location servers or modify the accuracy of your location data. If you disable positioning, this will have severe impact on our capability to deliver the Service to you to help us to improve our core offer to you – insights on the telecommunication network performance in Iraq.

What Data Do We Collect?

• Date and time
• Device data: Device vendor, model and operating system version
• Operator data: Network and SIM-card operator
• Location data: Location information from GPS or network-based positioning
• Performance data: Bit rate of sending and receiving data, network maximum transfer unit and latency
• Usage data: Battery usage and data usage
• Application data: IPv4 address (only 24 significant bits), IPv6 address (only 96 significant bits), technical details on application connectivity
• Network data: Wireless network technology (like UMTS, LTE, 5G etc.), radio type (wifi or cellular), base station identifier, SSID and BSSID, detailed network technical information (signal strength, signal power, receive power, channel quality, bit error rate, link speed, frequency used etc.), IPv4 address (only 24 significant bits) and IPv6 address (only 96 significant bits)
• Additional data: Data entered by you through the Service during the creation of the performance feedback

The only collected personal data where you may be identifiable is location data. We do not collect your name, mobile phone number, SIM-card details (IMSI) or the unique mobile device identifier (IMEI).

What is the Basis for the Collection?

The basis for the collection of data is the legitimate interest of Company based on the customer relationship with you. The collection may also be based on the performance of the contract or your consent.

How Do We Protect and Store the Data?

We take appropriate steps to address both physical and online security, risk of data loss or breach and other such risks, always taking into consideration the nature of the data being processed. We limit access to our database to authorized persons having a justified need to access such information.

Data shall be stored within Republic of Iraq and Qatar.

How the Data Will be Used?

Company uses the data to provide you insights on your personal network performance in Iraq. In addition, Company uses the data to regulate and improve telecommunication networks in Iraq.

Who It Will be Shared With?

Data will be shared with Telecom Operators of Iraq to troubleshoot potential network performance issues you might encounter.

Data Retention

The periods for which we keep your information depend on the purpose for which your information was collected and the use to which it is put. We will not keep your personal information for longer than necessary for our business purposes or for legal requirements.

After period of 2 years data will be kept only at an aggregated level.

Your Rights

• Request to know what information has been collected and stored
• Request correction on this data
• Object processing on grounds relating to your particular situation
• Request to limit the usage of the data if in your opinion:
  • the data is incorrect
  • processing is unlawful and you oppose the removal of data
  • we do not need data, but you need it to present or defend a claim
  • you have objected the processing and it is not yet established whether our interests override your interests
• Request to be forgotten and removal of all the data
• Request transfer of your information that you have provided to us to another provider
• Withdraw your consent for processing at any time without affecting the lawfulness of processing based on consent before withdrawal

Contact Details of Data Protection Officer

Company Data Protection Officer is Eng. Mohammed Qasim. The Data Protection Officer may be contacted from the following email address: sts@cmc.iq.

Changes to Our Privacy Policy

We may update this Privacy Statement from time to time. If we modify our Privacy Statement, we will post the revised version at https://xxx.xxx.xxx/, with an updated revision date.