People are allowed to take a picture of you (GDPR)