The Controller adopts a privacy policy and makes it available to data subjects before collecting their data, stating the purpose of collection, the data collected, the means of collection, processing, storage and destruction, and the data subjects' rights and how to exercise them (Law 12).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.