When personal data are obtained, the controller or the person it authorises must inform data subjects of the identity of the controller and any representative, the purpose of processing, to whom and for what purposes the data may be transferred, the method and legal basis of collection, and the rights in Article 11. Failure is fined TRY 5,000 to 100,000 (base amount, revalued yearly) under Article 18(1)(a).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.