Cart abandonment emails sent without consent are considered to be GDPR compliant on the basis of legitimate interest. These emails are considered as a type of contact that supports customers to make informed purchase decisions.