Yes, you can send cold emails to people at companies under GDPR. Those need to be B2B emails that meet certain requirements. 

Firstly, you can’t send them to just anyone. You need to target your prospects very carefully. You need to have a strong reason to claim that the company the person works for can benefit from what your company offers in the email. 

Secondly, in each of your email messages, you need to inform your cold email recipients what personal data you are processing, for what purpose, and how they can remove their data from your mailing list or change them. That’s how you fulfil the information duty described in GDPR. 

Thirdly, you should not process your cold email addressees’ personal data for longer than it’s necessary. GDPR does not specify any particular period of time. We advise removing from your lists the data of prospects who have not replied within 30 days from sending them your first message. That’s how you abide by the data storage limitation principle while sending cold emails.