They had his email because he gave it to them. Adorama isn’t dumb, they’re not going to violate federal and/or EU law. If you’ve browsed their web site while signed in they’ve given you a cookie and if you’ve consented to marketing email they’ll email you when they see you’ve visited. I’ve had this happen too. The way to stop it, if you want to, is to withdraw consent to marketing emails and/or logout and block cookies.
And if you don’t want all those ads, stop using Chrome and Android, and use a different browser with ad blocker. Of course you’re being advertised at - you’ve got a device and software designed to track and log your personal information and make money by showing you ads!