Privacy Policy
Last updated: June 2026
1. Controller
Rayora UG (haftungsbeschränkt), operating this website under the brand "GLAB — German Language Academy of Bangladesh."
Managing Director: Mohammad Rayhanur Rahman
Samlandweg 90, 22415 Hamburg, Germany
Email: contact@rayora.de
2. General Information
Protecting your personal data is important to us. We process your data confidentially and in accordance with applicable data protection law, in particular the EU General Data Protection Regulation (GDPR). You can generally use this website without providing any personal data. Where personal data is collected (e.g. name, email address, phone number), this is, unless otherwise stated below, always on a voluntary basis.
3. Hosting
This website is hosted by Netlify, Inc. When you visit this website, technical information is automatically processed, including:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- Pages visited
This processing is necessary to ensure secure and stable operation of the website (legal basis: Art. 6(1)(f) GDPR, legitimate interest).
4. Contact
If you contact us via our contact form or by email, the data you provide (which may include your name, email address, phone number, and message content) is stored to process your inquiry (legal basis: Art. 6(1)(b) GDPR, pre-contractual measures, or Art. 6(1)(f) GDPR, legitimate interest).
5. Course Applications & Registration
Through this website you can apply for or register for German language courses offered by GLAB. Depending on the course and step, this may involve collecting:
- Full name, email address, WhatsApp/phone number
- Date of birth (for A1 Foundation applicants, used to verify your application)
- GLAB-ID (a student identifier we assign)
- Desired or confirmed course/batch
- Payment proof (e.g. a screenshot or receipt) and payment reference
- Any feedback or additional information you choose to submit
This data is used exclusively for course organization, admissions, payment verification, and communication with you (legal basis: Art. 6(1)(b) GDPR, performance of a contract or steps prior to entering one).
Backend infrastructure: Submitted data is stored and processed using Google Sheets and Google Apps Script (provided by Google Ireland Limited / Google LLC). Where this involves a transfer of data outside the EU/EEA, this takes place on the basis of Standard Contractual Clauses under Art. 46 GDPR.
6. Exams
Where you take a placement or course exam through this website, we process your GLAB-ID, name, submitted answers, scores, and — where a writing task requires it — a photo or scan of your handwritten answer, uploaded via Google Drive. This data is used to administer and grade the exam and verify your eligibility to take it (legal basis: Art. 6(1)(b) GDPR).
7. Certificate Verification
Our certificate verification tool looks up an existing certificate record by the ID you enter. No new personal data about you is collected beyond the certificate ID you submit for the lookup.
8. WhatsApp, Facebook & Social Media
This website contains links to WhatsApp, Facebook, and other social platforms. Clicking these links takes you to third-party services outside our control. The respective provider is solely responsible for data processing on their platform.
9. Storage Duration
We retain personal data only for as long as necessary for the purpose it was collected for, or as required by applicable statutory retention obligations (for example, German commercial and tax law generally require certain business records to be kept for six to ten years).
10. Your Rights
Under the GDPR, you have the right to:
- Request access to the personal data we hold about you (Art. 15)
- Request correction of inaccurate data (Art. 16)
- Request erasure of your data (Art. 17)
- Request restriction of processing (Art. 18)
- Request data portability (Art. 20)
- Object to processing (Art. 21)
To exercise any of these rights, contact us at contact@rayora.de at any time.
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. Any changes will be posted on this page.
See also our Impressum and Terms and Conditions.