My daughter is 14 and sings with a choir. Under new GDPR laws, we were asked for parental permission to use photographs. We didn't consent, yet her photo has recently been taken within a group shot and published in concert programmes and on their website. In addition, she was recently made to download an app on her phone detailing upcoming choir events. In order to do so, she had to tick a box to confirm she was over 16, despite only being 14. I have complained to the committee but they have done nothing about it. What rights do I have?