Privacy and Cookie Policy
Last updated: 13 October 2026
This policy explains how personal data is processed when you use whitecoatpro.com (WhiteCoat Pro), the international edition of an independent medical education platform. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the ePrivacy rules on cookies.
1. Who is responsible for your data
The controller is Individual Entrepreneur Aleksandr Andreevich Aulov (Russian Federation), taxpayer number (INN) 772830395578, registration number (OGRNIP) 319774600307273.
Contact for any privacy question or request: SechenovUniverskill@yandex.ru.
2. What we process and why
Technical data when you open pages: IP address, browser and device type, requested address and time. The website is delivered to you by our server in Finland (European Union). Before a request is forwarded to our content server, your IP address, cookies, browser identifier, language and referring page are removed, so this data does not leave the EU. In the access logs of the EU server the last part of the IP address is set to zero; these logs are kept for up to 14 days. Purpose: delivering the website, security and protection against abuse. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
Search queries you type on the site (for example, in the reference search) are passed to our content server without your IP address or cookies, only to show results, and are not linked to your identity.
Analytics, only if you consent: Yandex Metrica collects visits, pages viewed, clicks, device data and approximate location derived from the IP address, using cookies. Session recording is switched off. Purpose: understanding how the site is used and improving it. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Embedded videos, only if you consent: when you load a video from VK, YouTube or Rutube, the provider receives your IP address and may set its own cookies. Legal basis: your consent (Art. 6(1)(a) GDPR).
If you write to us by email, we process your message and contact details to answer you (Art. 6(1)(f) GDPR) and keep them as long as needed to handle your request.
This website does not offer accounts, payments or newsletters. Links to sign-in, payments or the learning cabinet lead to our Russian-language service, which has its own privacy policy.
3. Cookies and similar technologies
Strictly necessary (always on): wcp_consent (cookie and browser storage) — remembers your cookie choice for 13 months, after which we ask again. It does not require consent. The website sets no other cookies of its own.
Analytics (only with consent): Yandex Metrica cookies such as _ym_uid, _ym_d, _ym_isad and related identifiers set by Yandex.
Embedded videos (only with consent): cookies and identifiers set by VK, YouTube (privacy-enhanced mode) or Rutube when a video is loaded.
You can change or withdraw your choice at any time via “Cookie settings” at the bottom of every page. Withdrawing consent does not affect processing carried out before it. If your browser sends a Global Privacy Control signal, we treat it as a refusal of optional cookies.
4. Who receives the data
Hosting: the website is delivered from our server in Finland, European Union (Aeza data centre, Helsinki). The content server in the Russian Federation (Selectel) receives only anonymised requests without your IP address, cookies or browser data.
Analytics: Yandex LLC (Russian Federation) — only with your consent.
Video providers: VK (Russian Federation), Google (YouTube) and Rutube (Russian Federation) — only when you load a video.
Email: messages you send are processed by our email provider Yandex LLC (Russian Federation).
We do not sell personal data and do not use it for advertising profiling.
5. Transfers outside the European Economic Area
Visiting the website does not transfer your personal data outside the EU: pages are delivered from Finland and only anonymised requests reach our content server in Russia. A transfer happens only if you consent to analytics or load an embedded video: Yandex, VK and Rutube process data in the Russian Federation. The European Commission has not adopted an adequacy decision for Russia, and we do not rely on standard contractual clauses with these providers. This means that EU-level protection of your data cannot be guaranteed there.
For analytics and embedded videos we therefore rely on your explicit consent to the transfer (Art. 49(1)(a) GDPR), which you give in the cookie banner after being informed of these risks. Without that consent no data is sent to these providers.
6. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability and to withdraw consent at any time.
To exercise your rights, write to SechenovUniverskill@yandex.ru. We will respond within one month.
You also have the right to lodge a complaint with the data protection supervisory authority of your EU member state of residence, work or of the alleged infringement.
7. Other information
We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.
The website is intended for medical students and professionals and is not directed at children under 16.
We protect data with encrypted connections (HTTPS), access restrictions and short retention periods.
We may update this policy; the date of the latest version is shown at the top of the page.