Privacy-preserving aggregate queries for optimal location selection