Static Analysis for GDPR Compliance