If there was no "opt out" option during the sign up to Apoc, then yes. There is a breach of GDPR (potentially*).
However, as I said, I can't remember so I'm not going to accuse anyone of a breach.
* I'm no expert on GDPR but I know the basics, so I'm not saying 100% breach. But what I do know...