At any time the data subject may request in writing or electronically that the controller or processor stop processing that causes or is likely to cause loss, sadness or anxiety, unless the controller or processor demonstrates compelling legitimate grounds overriding the data subject's interests, rights and freedoms or the establishment of a legal claim; the data subject may always require processing for direct marketing, including related profiling, to stop; the controller or processor must inform the data subject within 30 days of compliance or the reasons for non-compliance, with appeal to the supervisory authority within 30 days and its response within 60 days.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.