55Under point (a) of the first subparagraph of Article 6(1) of the GDPR, the processing of personal data is lawful if and to the extent that the data subject has given consent for one or more specific purposes. In the absence of such consent, or where that consent is not freely given, specific, informed and unambiguous, within the meaning of Article 4(11) of the GDPR, such processing is nevertheless justified where it meets one of the requirements of necessity mentioned in points (b) to (f) of the first subparagraph of Article 6(1) of the GDPR. In that context, the justifications provided for in that latter provision, in so far as they allow the processing of personal data carried out in the absence of the data subject’s consent to be made lawful, must be interpreted restrictively (judgment of 9 January 2025, Mousse, C‑394/23, EU:C:2025:2, paragraph 26 and 27 and the case-law cited).