GDPR and locked content, legal or not?
<p>We are at the point where we want to launch a web application. The application requires the visitor to create a free account to explore the website. So already at the beginning, they need to create the account.</p>

<p>Creating the account goes hand-in-hand with receiving marketing emails. The visitor can choose between:</p>

<ul>
<li>once a week</li>
<li>once per 2 week</li>
</ul>

<p>It is not possible to choose for "0" marketing mails. This is our whole business model.</p>

<p>Is this setup legally OK under the new GDPR? I have checked but I couldn't find anything related to the topic.</p>

<p>If these are your marketing emails this is fine as you have a relationship with the user. Of course, if they object to receiving these then you must stop sending them and you must enable them to object (an unsubscribe link).</p>

<p>If you are sending third-party marketing info then this breaches anti-spam legislation pretty much everywhere in the world.</p>

gdpr terms-of-service email