Article 3: the Law covers automated processing and non-automated processing of data in or intended for a filing system, excluding purely personal or household processing; it applies to controllers and processors with a seat, residence or stay in Serbia for activities carried out in Serbia wherever the processing takes place, and to controllers and processors without such a presence that process data of persons residing or staying in Serbia when offering them goods or services (paid or free) or monitoring their behaviour in Serbia.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.