Such data is still subject to GDPR, even if you’ve held the data for several years.
It is up to you to decide what to do with the data. As per the regulations, there are different legal grounds for you to process data and communicate with supporters. There will be multiple factors to take into account, for instance whether you have an existing direct relationship with the supporter.
Unfortunately we are not able to provide any legal advice.