Direct marketing covers communication with directly identifiable persons to promote goods or services, including membership, fundraising and related preparatory activity by the advertiser or a third party. It may rest on legitimate interests, including with data taken from publicly accessible sources, so long as the data subject's interests are not affected; processing sensitive data for direct marketing requires express consent; and the data subject may object at any time under Article 19(2), after which processing for marketing must stop.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.