Email is simple under GDPR. You can prove consent or you cannot email a person in the EU.
That opt-in must be "re-permissioned" every 2 years. No renewal - emails must stop. We believe it will be best presented as a 2 year subscription to your email content. You must re-subscribe every 2 years. This ensures your recipient's data and interest is current and still relevant.