Information Flow Audit for Transparency and Compliance in the Handling of Personal Data