Data subjects may at any time, free of charge and through physical or digital means provided by the controller, submit requests, petitions, complaints or claims about their rights, the principles or the controller's obligations; the controller has 10 days to answer affirmatively or negatively, notify and carry out what is due. The Reglamento asks controllers to offer simple, preferably digital channels (platforms, contact centres, telephone lines) that allow secure, reliable and quick interaction, while still accepting physical requests; requesters must prove identity or representation; a request states the data subject's full name, identity number and notification address, a description of the data where possible, what is asked and which right, with identity documents; the controller may, once and within 5 days, ask for clarification, which the data subject has 10 days to give, failing which the request is archived with reasons (a new request remains possible); and all requests and the response given must be recorded. If the answer is refused or not given in time, the data subject may file an administrative claim with the Authority under the Codigo Organico Administrativo, besides civil, criminal or constitutional actions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.