GDPR-compliant school photography