An individual might accidentally capture a license plate on a picture they take, or if you use pictures for traffic monitoring and they capture license plates but you don't store the data, those might be legitimate purposes. "Go around and spy on your neighbours for some foreign company" cannot be legal.

See also the privacy policy that was lorem ipsum when this was posted. When someone commented, the owner seems to have quickly downloaded a template somewhere that says vague things like "we use it for legitimate business interests".