Massive Facial Databases and the GDPR: the New Data Protection Rules applicable to Research