Yes, but …
However, under Article 14, you must inform data subjects within 30 days that you are processing the data and where you got it. This also applies to data you have from public sources, but only if the processing is not yet known to the data subject.
In addition, when contacting “not yet customers”, you must follow the rules of the Telecommunications Act.
It must also be easy for the data subject to object to this processing.