The company used a personal photo of the data subjects for marketing purposes without a sufficient legal basis.
the company used a personal photo of the data subjects for marketing purposes without a sufficient legal basis
 company use  personal photo   data subject  market purpose without  sufficient legal basis