I am surprised they haven't been fined out of existence yet.
In Germany not only the GDPR regulation but also the so-called "right to the own picture" applies here.This means that no one may use/sell pictures of a person without explicit consent. Therefore, photographers must also have an explicit release of the person for the respective context of use.
The article claims you could ask for deletion of your data without uploading your ID.
So If they have data on you, that is older than a month, and did not contacted you to inform you of it, you can file a complaint!
https://github.com/LINCnil/Guide-RGPD-du-developpeur/blob/ma... (In French sorry)
edit: also France did fine Google just fine.