⋮ 11. We may monitor any content or material transmitted over thesystem, including email and internet communications, where required by law or an enforcement authority, or as part of any actual or potential criminal or suspected fraudulent activity. … ⋮
Not sure the T&Cs fully clarify the specifics of what takes place as it depends on what is actually 'required by law', which seems to be the bit which is unclear to many. My recollection of similar past queries on here about this is that VM do not routinely log web browsing activity.
My interpretation of the T&Cs quoted fits with the article which is that no routine logging takes place but the capability exists to do so if a specific request is made to start doing so against a particular customer.