Under the upcoming GDPR law, once a new user signs up for an account after agreeing to the Terms of Service, can we send an email verification email to the user? Or do we need to take explicit consent for that and ask the user to click a button to send the verification email?

I've tried searching the web but haven't found the answer yet.