Data subjects may know the sources, location and purpose of processing and the controller's location; obtain the conditions of access and information on third parties receiving their data; access their data and within thirty calendar days learn whether it is processed and its content; object with reasons; demand change or destruction of unlawfully processed or inaccurate data; be protected from unlawful processing and loss; complain to the Commissioner or a court; set restrictions when consenting; withdraw consent; know the logic of automated processing; and be protected from automated decisions with legal effects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.