Modelling and transforming security constraints in privacy-aware business processes · Study