The GDPR will apply to most electronic promoting things to do, as these will require some use of non-public data (e.g. an email tackle which incorporates the receiver's name). Probably the most plausible lawful bases for electronic marketing might be consent, or maybe the legit pursuits on the controller (and that is expressly referenced as an prop