Wow, get this: The EU Parliament #GDPR Guidelines.

“Underlines that all six legal bases laid down in Article 6 of the GDPR are equally valid for the processing of personal data…”

… quite some detail
https://www.europarl.europa.eu/doceo/document/B-9-2021-0211_EN.pdf