This policy explains how personal data is collected, used, and protected on the Alarusse.co website.
The data controller is Anna Oshlakova, sole proprietor, IČO (identification number): 08706468, registered in the Czech Republic.
2. Data Collected
Identification data: name, email address, password (when creating an account or making a purchase).
Order data: purchased courses, purchase history, payment status.
Financial data: processed by dedicated third-party providers; we do not store banking details.
Technical data: IP address, device type, cookies, browsing data, security and analytics.
Communications: messages exchanged via form or email, support requests.
Data relating to monthly subscriptions: subscription date, subscription status, history of recurring payments.
3. Purposes of Processing
Data is used to:
perform the contract (provide access to courses and materials);
process orders and payments;
ensure the delivery of physical products;
maintain site security and prevent fraud;
comply with legal obligations (accounting, taxation);
send marketing communications, if you have given your consent ;
manage monthly subscriptions, including automatic billing, payment tracking, and the option of cancellation.
4. Third-Party Providers & Data Transfers
Payments are handled by third-party payment service providers that ensure secure processing.
In the case of monthly subscriptions, recurring payments are processed by these providers; Alarusse never stores banking data (such as card numbers).
Other providers (hosting, messaging, analytics tools) may access data according to their roles.
Transfers outside the EU are only possible if based on appropriate safeguards (for example, the EU Standard Contractual Clauses) or an equivalent legal framework.
5. Cookies
We use cookies for:
site operation (essential cookies);
service analysis and improvement (analytics cookies);
supporting transactions (cookies related to payment providers).
Pour les abonnés, certains cookies peuvent être utilisés afin de mémoriser l’état de connexion et faciliter l’accès aux contenus réservés.
On your first visit, you are invited to accept or refuse non-essential cookies.
6. Your Rights (GDPR)
You may exercise the following rights:
access to your data;
rectification or erasure;
restriction of processing;
data portability;
withdrawal of consent (for marketing communications);
filing a complaint with the competent supervisory authority.
In the event of cancellation, you may request the deletion of your personal data related to the subscription, subject to legal and tax retention obligations (for example, billing data).
Competent authority in the Czech Republic: Úřad pro ochranu osobních údajů (UOOU).
7. Data Retention Period
Account and order data is retained until you request its deletion; otherwise, it is kept for up to 10 years to meet accounting and tax obligations.
Marketing data (email) is retained until you unsubscribe.
Cookies are retained according to their purpose and duration as specified in the cookie banner.
In the event of cancellation, account data and the history of recurring payments may be retained for legal and tax purposes for as long as necessary, unless the user expressly requests otherwise.
8. Security
Appropriate measures are implemented to protect your data against any unauthorized access.
Financial transactions are handled by providers that comply with industry security standards (such as PCI DSS).
9. Changes to the Policy
This policy may be amended at any time. The version published on the website applies as soon as it is made available online.
Date of publication of the current version: September 25, 2025
Alarusse.co — an educational and cultural project dedicated to the Russian language and culture, as well as to travels in Russia, both virtual and real.