For information transferred from the EEA (and, from 1 January 2025, any other information in a database that holds such information), the controller deletes it on written request where it was collected unlawfully or is no longer needed for its purposes, unless use is necessary and proportionate for freedom of expression, a legal duty, a public interest including archives and research, legal proceedings or debt collection, fraud and integrity incidents, or an international agreement; deletion may be replaced by making identification impossible by reasonable means; the decision is notified in writing promptly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.