Need of explicit consent

You need to verify if the client has consent from contacts to share data with third parties. If the client did not acquire consent, you need to give them information and acquire consent under article 14 GDPR. Legitimate interest does not include the processing to invite to hosted events.

Here you can find more information about consent and GDPR

• Is consent needed? Six legal bases to process data according to GDPR: https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/
• Everything you need to know about the GDPR Privacy Notice: https://advisera.com/articles/gdpr-privacy-notice-6-key-elements-to-include/
• How does GDPR affect digital marketing? https://advisera.com/eugdpracademy/blog/2019/02/20/how-does-gdpr-affect-digital-marketing/

If you want to learn how to comply with EU GDPR requirements you may consider enrolling in our free training EU GDPR Foundations course: https://advisera.com/training/eu-gdpr-foundations-course//

Dear Alessandra,

Thank you for your response.

Just slightly unclear with one thing

If the client did not aquire consent then can we atleast get in touch with the contacts to collect their consent to be contacted or first the client will have to do their bit around collecting consent for their data to be shared with 3rd party?

Tecnically, your client is the data controller who should acquire consent before sharing its clients' data with third parties. You could send a cold email under legitimate interest and acquire consent acting as a data controller.