Tag: Article 6
No, you may not. You may only do it if you have a prior sales relationship with the person. This is not regulated in the GDPR, but in Directive 2002/58/EC.
In summary, GDPR requires that personal data must be processed lawfully, and there are six lawful bases for processing. At least one of these must apply in order for GDPR to be complied with.