Every natural person may object, for legitimate reasons, before the controller to the collection and processing of their personal data, including for commercial promotion; the right does not apply where the controller is legally required to collect the data or where the person agreed to the processing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.