The data subject may obtain, within 30 days of the request, confirmation whether their data are processed and, if so, access to the data with the purpose, the logic and consequences of automated decisions and profiling, the storage period or criteria, the legal basis, the data categories and any available information on the source, the recipients (in particular abroad) and the transfer safeguards, and the existence of the other rights and the right to complain to the Commissioner. The controller must give free of charge a copy of the list of processed data categories with the content of each, without harming others' rights; further copies may carry a reasonable administrative fee; electronic requests get a commonly used electronic form unless otherwise asked.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.