This is exactly what GDPR is for. https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-constitutes-data-processing_en https://ec.europa.eu/info/

This is exactly what GDPR is for. https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-constitutes-data-processing_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... > Examples of processing include: > [..] > sending promotional emails*; > [..]