Site information and privacy
This notice explains who operates Hippo Works, which personal data is processed on this website, why it is needed, how long it is retained and what rights you have. Last updated 22 September 2026.
Controller and contact details
The controller is Ing. Jan Hroch, a self-employed sole trader trading as Hippo Works, Czech company ID 30025621, not registered for VAT. Registered address: Turistická 167/10, 466 06 Jablonec nad Nisou – Vrkoslavice, Czech Republic.
For questions about personal data or to exercise your rights, write to hello@hippoworks.eu.
What is available
Architecture Workbench products are available in an initial release and can be purchased through Polar. Services are open to new enquiries. You cannot create an account on this site. The contact page can send an enquiry and an acknowledgement email.
Contact form: data and purpose
The form processes the email address and message you submit. Your name is optional. It also processes the selected language and, for security purposes, the IP address, browser and device information, TLS fingerprint, site key, page origin and the Turnstile security token. Cloudflare states that Turnstile does not access, store or transmit the contents of form fields.
I use the contact details to answer your enquiry and, where relevant, to discuss possible collaboration. If the enquiry is made in order to take steps before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other requested communication, the legal basis is my legitimate interest in answering people who contact me under Article 6(1)(f) GDPR.
The security data is processed on the basis of my legitimate interest in protecting the website and form from spam and automated misuse under Article 6(1)(f) GDPR. Relevant correspondence may also be retained where necessary for the establishment, exercise or defence of legal claims on the same legal basis.
Using the form is voluntary. A valid email address and a message are necessary for me to reply; without them the form cannot be submitted. You can instead write directly to hello@hippoworks.eu.
How the message is delivered
The form sends the submitted details to Hippo Works by email and sends an acknowledgement containing a copy of the message to the address you provide. The website does not create a separate enquiry database, but the incoming message and sent acknowledgement are stored in the email system.
Do not submit passwords, access credentials, confidential documents, special-category personal data or other sensitive information. We can agree a more suitable way to share necessary documents.
Recipients and service providers
I have access to enquiries as the controller. The following providers process data to the extent necessary to operate the website and deliver messages: Cloudflare, Inc. and its sub-processors for website hosting, request handling and Turnstile protection; and Infomaniak Network SA for email transmission, storage and backup.
For Turnstile signals used to secure this website, Cloudflare acts as my processor. Cloudflare acts as an independent controller when it uses those signals to improve its bot-detection service, as described in its Turnstile Privacy Addendum.
Transfers outside the EEA
Infomaniak stores customer data in Switzerland. The European Commission has recognised Switzerland as providing an adequate level of personal-data protection, so this transfer is based on Article 45 GDPR.
Cloudflare operates a global network and data may be processed outside the European Economic Area, including in the United States. For restricted transfers, Cloudflare's Data Processing Addendum incorporates the European Commission's Standard Contractual Clauses and additional safeguards.
Retention periods
Enquiries that do not lead to collaboration are deleted from the working email account no later than 12 months after the last substantive communication.
If collaboration begins, correspondence relevant to the agreement is retained for the duration of the relationship and normally for 3 years after it ends. It may be retained longer while a claim or dispute is pending or where a legal obligation requires it. Unnecessary messages and attachments are deleted sooner.
Infomaniak makes a daily mailbox backup. Depending on the plan, a deleted message may remain recoverable from backup for up to 30 days and is then removed through the provider's backup cycle. The form code does not separately retain the Turnstile token or IP address after the request; infrastructure and security records are retained by Cloudflare according to the service configuration and applicable terms.
Automated security check
Cloudflare Turnstile automatically evaluates security signals and may prevent the form from being submitted if it identifies automated or abusive traffic. This check is used only to protect the form and does not produce a decision with legal or similarly significant effects. If the form is unavailable, you can contact me by email.
Browser storage, cookies and analytics
Your colour theme is saved in localStorage as hippo-works-theme until you clear it. An explicit language choice is saved in localStorage as hippo-works-language when you use the language switcher or open a language-specific page directly. Dismissing the homepage notice saves a flag in sessionStorage for the current browser session. These settings are used only to provide the requested interface behaviour.
The site code does not use advertising or audience-measurement analytics. Turnstile is currently configured without Pre-clearance and therefore does not issue the cf_clearance cookie. Cloudflare may still use other strictly necessary cookies or similar technologies if another active security feature requires them. They are not used by Hippo Works for advertising. If non-essential analytics or marketing technologies are introduced, they will remain inactive until the required consent has been obtained.
Purchasing digital products
Product purchase links use the Polar checkout. Polar Software, Inc. acts as merchant of record and processes the details required to complete the purchase, payment, tax handling, fraud prevention and product delivery. Its checkout terms and privacy policy apply when you open or use the checkout. Polar may process data in the United States and other countries using the safeguards described in its privacy policy.
Polar may make customer and order details available to Hippo Works, including the customer's name, email, billing details, purchased product and order or payment status. I use these details where necessary to provide the purchased product and support under Article 6(1)(b) GDPR, to meet applicable accounting or tax duties under Article 6(1)(c) GDPR and to handle legal claims under Article 6(1)(f) GDPR. I do not receive full payment-card details. Relevant records are retained for as long as needed for delivery and support and afterwards for the applicable statutory retention or limitation period.
Pages offering a purchase load the Polar checkout component from the jsDelivr content-delivery network. This request may disclose network and browser metadata, such as the IP address, browser type, referring domain and request time, to the CDN operator.
Marketing communication
Submitting an enquiry does not subscribe you to a newsletter or marketing distribution list. Contact-form details are not used to send unrelated commercial messages. Any future newsletter subscription will be offered separately and voluntarily.
Your rights
Subject to the conditions in the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing and data portability. You may object at any time to processing based on legitimate interests. There is no right to withdraw consent for the contact form because the processing described above is not based on consent.
Send your request to hello@hippoworks.eu. I may ask for information reasonably necessary to verify your identity. I will normally respond within one month, subject to the extensions allowed by Article 12 GDPR.
Right to lodge a complaint
You may lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, email posta@uoou.gov.cz, data box qkbaa2n. You may also contact the supervisory authority in the EU country where you live or work.