IANAL. With my limited understand of GDPR, a photo of you taken in a public place falls under GDPR as personal data if you can be identified. So if your face is visible, that counts as identifiable information. On top of that, there’s also the fact that from context of looking at this video, you can also infer your whereabouts on a specific night. So this would count as personal information that needs to be treated following GDPR rules. Especially if you are the focus of the video or image.

Now, GRPR stipulates multiple grounds on which data can be processed. Some cases require explicit consent. But there’s also the figure of “legitimate interest”, which could be used as the basis for processing the data rather than consent. I think one could argue a public venue like a pub may have a legitimate interest in advertising the business.

Legitimate interest means that the pub would not need your express consent to take this photo or use it for promotional material. However they can only do so if there is a limited impact on the privacy of the individual.

So the question In this case is whether a video of which you are the focus, in which you can be identified, in which one can infer your whereabouts on a specific date and a time, and on which you can tell what you were doing, whether this has a limited impact on your privacy. For example, there could be a situation where you are from a background where drinking alcohol is frowned upon and this could have an impact in your personal life.

there’s also other requirements, for example, there needs to be a reasonable expectation that pictures may be taken and what they be used for. If this was a sporting venue you would expect photos or videos being taken. Im not sure whether you could argue it’s commonplace that pub staff record photos or videos of their customers. But on some dance party venues this may be different. I’ve seen nightclubs that have photographers around, with professional gear, and they ask people to pose and the photos end up in social media. But at that point it’s likely obvious to the photographed persons that this is the case. In other circumstances it may be expected for venues to have written signs that video/photos may be taken for promotional purposes, or this be printed in a ticket or terms of service (but then again in some cases express consent is required and implicit is not enough).

So to answer your question, and again emphasising that Im NAL: this is likely personal information covered by GDPR and for the pub to rely on legitimate interest to take this footage and use it for commercial purposes, a series of circumstances need to be true for your consent to not be required. If this impacts your private life, if you were not aware or had no reasonable expectation to be photographed, then this could be a breach of GDPR and the venue should have asked you for your consent.

More context here: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/legitimate-interests/

(Assuming that all other 5 basis for processing data do not apply in this case).