The data subject has the right not to be subjected to a decision with legal effects on them, or that significantly affects them, based solely on processing of personal data intended to evaluate certain aspects of their personality or conduct, except within the negotiation, conclusion or performance of a contract or in evaluations for entry into a public entity according to law, and without prejudice to the possibility of defending their point of view to safeguard their legitimate interest (Reglamento article 87 details the exercise).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.