Any communication received without explicit consent, after providing details, is junk, and would fall under GDPR as using that info for a different purpose than what was described.