User Modeling for Privacy-preserving Explanations in Group Recommendations