[tooop]

As far as i understand this doesn't fall under GDPR unless the video is published because of personal use. If she publishes the video, you have the right to ask her to take it down/remove your PII from the video. But there might be additional local privacy laws that change things and GDPR has nothing to do with it.

[closeparen]

As we learned from this listing, the video's controller is required to notify the subject that he appears in the video before processing it. If the controller does not have enough information to contact the subject, he cannot fulfill that requirement, and is therefore noncompliant.

[tooop]

I would disagree because "The rules don’t apply to data processed by an individual for purely personal reasons or for activities carried out in one's home, provided there is no connection to a professional or commercial activity." Obviously when you put the video out in the world those rules start to apply (especially if you make money from that - ads etc.). I don't see how GDPR applies if i take pictures on my vacation and show them to my family/friends after (this is purely personal use). Even in case of surveillance (dashcam, cctv) you don't need to get consent from every person, you just need to inform them (signage) that surveillance is happening.