Your research has no legitimate interest to process personal data.

If it is not possible to establish a legitimate interest, or the legitimate interest is outweighed by the rights and interests of the individuals, data processing cannot continue.