Without consent, a controller must not collect a known minor's precise geolocation data unless it is reasonably necessary to provide the service, is collected and kept only for the time needed, and the controller shows the minor a signal that collection is happening for its whole duration; the signal duty does not apply to a service used by and under the direction of a ski area operator.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.