There are already plenty of good articles covering the collection/usage of email addresses under GDPR. Instead, this one focuses on how to make sure the actual email you send to these addresses is compliant; a surprising harbourer of additional liability.