In most eu countries, you can record in public, but gathering identifying data ("making a database") is strictly regulated, and that includes faces from those photos. You can't even point a security camera at public areas (ie. outdoor camera recording the street infront of your house), because that's enough data to make it a "database".