Limak’s GEG Programme UK - Privacy Notice
Last updated: 07.04.2026
Table of content
Limak International Limited, responsible for implementing and administering the Global Engineer Girls Programme (GEG Programme) in the UK, is the controller of your personal data covered in this Privacy Notice. We’re registered with the ICO, with registration number ZC116570.
We respect your right to privacy and this Privacy Notice explains how Limak International Limited and the Limak Group of Companies who operate and participate in the GEG Programme, (“Limak”, "we", "us" and "ours") collect, share and use your personal data and how you can exercise your privacy rights.
This Privacy Notice covers our processing via this website (“Website”) and other processing activities undertaken in the context of the GEG Programme. It applies only to personal data of the GEG Programme participants (students, mentors and contributors) in the UK.
If you have any questions or concerns about our use of your personal data, please contact us using the contact details under the “How to contact us” heading below.
Return to top
1. Personal data we collect and process
We collect your personal data from the following sources:
a) Collected from you (directly and indirectly)
This happens when you share this information with us, for example when submitting your CV and application form and related documents, communicating with our personnel or through any other interactions.
We also collect your personal data indirectly, through automated means, when you visit our Website (see the "Cookies and similar tracking technology" section below).
b) Collected from third parties
We also receive your personal data from third party sources, i.e. our partners in the GEG Programme Project (such as universities and business partners) (’Partners’). This data relates to training/course participation, internship participation, voluntary activities carried via Partners and educational results and professional experience relevant to the Programme. .We require such third parties to confirm that they are permitted to disclose your personal data to us.
The table below describes the categories of your personal data that we process:
| Personal data description |
Source |
| Identity and Contact Data such as your full name, email address, telephone number, address, a “Unique Identification Number” (UIN) assigned and used throughout the application and recruitment process and your participation in the GEG Programme, emergency contacts data |
• Directly from you (online or offline)
• Generated by us (UIN) |
| Education Background and Professional Experience Data including your CV; information in your application form, academic records (including GPA and academic achievement during your participation in the GEG Programme) and other educational information (university name, city of studies/country, department of studies, current year of study); professional background (current and previous job titles, companies/organizations, industry, years and types of professional experience, certifications or qualifications) and other educational background and professional experience information provided due to its relevance to the GEG Programme. |
• Directly from you (online or offline)
• From third parties (e.g. our Partners). |
Eligibility Data related to the eligibility criteria for the GEG Programme such as GPA average, year of studies, family information background such as your parents’ or guardians’ occupation, and its specific parts, e.g. internships, employment opportunities.
As the GEG Programme is intended to support students in overcoming challenges and obstacles resulting from their socio-economic background (or disability), the data you provide to us might include special category data (e.g. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or data concerning health or sexual orientation). |
• Directly from you (online or offline) |
| Recruitment Data means all data collected and processed during the recruitment. |
• Directly from you |
| Mentee and Mentor Profile Data such as the information provided by you directly by e-mail or in a Mentee Application Form (as relevant) and related information helping us to set-up and facilitate the process of mentoring. |
• Directly from you (online or offline) |
| Communications Data such as any queries you raise, survey entries, your feedback on the GEG Programme or the performance of our Website, and any other communications related to the Programme, including those related to managing invitations to and attendance at the GEG Programme events. |
• Directly from you |
Engagement Data related to your participation in the Programme including training, webinars, workshops, events, conferences, mentoring, internships, site visits, your pro bono/CSR activities and any other initiatives (as recorded e.g. in attendance records, progress reports, internship reports).
This data may include limited health data related to participation in the GEG Programme activities (for example relevant to special adjustments that you may explicitly require directly from us). |
• From Third Parties
• Generated by us |
| Device Data collected by cookies (and similar tracking technology) during your visits to our Website and including (your IP address, your ISP, the browser you use to visit our Website, device type, unique device identification numbers or other unique identifiers). |
• Automated collection |
| Website Use Data such as information about your interactions with our Website, captured by cookies (and similar technologies). This includes page views and searches, any log-in information, clicks, information about content viewed, watched or downloaded] and any other functional information captured during your visits to our Website (e.g. any errors, crash logs). |
• Automated collection |
| Students’ Content such as photos and videos submitted by you to illustrate your CSR engagement, and own reports about your Programme activities. |
• Directly from you |
| Business Contacts Data such as full name, email address, telephone number, and title collected when liaising with third party organisations in relation to the GEG Programme. |
• Directly from you
• From Third Parties |
Return to top
2. How we use your personal data (our purposes) and our legal basis for processing it
We use your personal data only for the purposes described in this Privacy Notice. Depending on our purpose for collecting your information, we rely on one of the following legal bases:
- Legitimate interests – we will process your personal data for your legitimate interests, or those of Limak, or a third party, but only when we are confident that your privacy rights will remain appropriately protected. If we rely on our (or a third party’s) legitimate interests, these interests will be related to managing, improving and promoting the GEG Programme.
- Consent – in certain circumstances, we may ask for your consent before we collect, use, or disclose your personal data, in which case you can choose to whether to give your consent (without any negative consequences if you deny it).
- Legal obligation – there are instances where we must process and retain your personal data to comply with laws that apply to us and to fulfil certain legal obligations. This can include processing your personal data to fulfil data subjects’ requests in compliance with data protection law.
The following table provides more detail on our purposes for processing and related legal bases.
| Purpose/Activity |
Type of personal data |
Lawful basis for processing (plus * for any special category data (SCD)) |
| Register your interest in the GEG Programme, evaluate your application and your eligibility for the GEG Programme and manage recruitment and selection process. |
Identity and Contact Data;
Education Background and Professional Experience Data;
Eligibility Data; Interview Data; Communication Data. |
Legitimate interests
* SCD: Explicit consent |
| Run, administer and manage the GEG Programme, and your participation in it, including events, training, mentoring, internships and all other initiatives within the GEG Programme, and related recordkeeping, reporting and hosting of data). |
Identity and Contact Data;
Education Background and Professional Experience Data;
Eligibility Data; Communication Data; Mentee and Mentor Profile Data; Engagement Data; Students’ Content Data |
Legitimate interests
* SCD: Explicit consent |
| Manage Limak’s relations with Partners and business contacts related to the GEG Programme. |
Business Contacts Data |
Legitimate interests |
| Responding to you and otherwise communicating with you (and in emergency situations, with your nominated contacts) as needed in the context of the GEG Programme. |
Identity and Contact Data;
Communication Data |
Legitimate interests |
| Reviewing communications (including any surveys and feedback) for training and quality assurance purposes, for analytics and Programme improvement. |
Communication Data |
Legitimate interests |
| Promote the GEG Programme and related initiatives, including those of our Partners. |
Contact Data
Students’ Content |
We will rely on consent for Students’ Content, and to the extent legally require.
Otherwise, legitimate interests. |
| Administer, maintain and keep our IT infrastructure, including our Website, secure. Monitor, troubleshoot, and support, test, repair, and address security threats. |
Website Use Data
Device Data |
Legitimate interests |
| Manage our use of cookies; carry out Website analytics, and evaluate this information (on an aggregated, group(s) basis) to improve the Website and the GEG Programme. |
Device Data
Website Usage Data |
Legitimate interests
Consent where legally required |
| Comply with legal and regulatory obligations to which we are subject, including our obligations under data protection law. |
Potentially any of the above categories, as necessary. |
Legitimate interests
Legal obligation |
| Protect our legal rights and conduct litigation to defend our interests. |
Potentially any of the above categories, as necessary. |
Legitimate interests |
| We may request certain health data from you when visiting our offices in the event of a health crisis or disease outbreak. |
Health data |
Explicit consent |
* Where we use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual orientation, we will process this data based on your explicit consent.
Return to top
3. Who we share your personal data with
We share your personal data with the following categories of recipients:
- our group companies https://www.limak.com.tr/corporate-leadership/annual-reports, who process personal data for purposes described in this Privacy Notice, or provide data processing services to other Limak companies as necessary for the processing described in this Notice. Our group companies, to which we transfer your personal data to support the delivery of the GEG Programme, are based in Turkiye and Kosovo and potential mentors may work at our companies in North Macedonia, Spain, Mozambique, Ivory Coast, Saudi Arabia;
- third party service providers and partners who provide data processing services to us as necessary for the processing described in this Notice to provide you with our services (to support the delivery of, provide functionality on, or help to enhance the security of our Website / App), or who otherwise process personal data for purposes described in this Privacy Notice. The following table lists (the main) third party service providers we engage to process your personal data, the categories of services they provide, and the types of personal data they receive from us to provide these services.
| Service Provider |
Category of services |
Personal data |
| Teknoloji Grup Bilişim ve Mühendislik Sanayi ve Ticaret Limited Şirketi (based in Turkiye) |
Enterprise IT services providers |
Identity and Contact Data, Education Background and Professional Experience Data, Student’s Content |
| Havas Engage Pazarlama ve İletişim Hizmetleri Anonim Şirketi (based in Turkiye) |
social media and other social platforms |
Identity and Contact Data, Education Background and Professional Experience Data, Student’s Content |
- any competent law enforcement body, regulatory, government agency, court or our professional advisers, where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or so a third party can defend theirs, or (iii) to protect your vital interests or those of any other person;
- a buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of Limak business, provided that we inform the buyer that it must use your personal data only for the purposes disclosed in this Privacy Notice; or
- any other person with your consent to the disclosure.
Return to top
4. Cookies (and similar tracking technology)
We use cookies (and similar tracking technology (collectively,) (“Cookies”) to collect and use personal data about you. For information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice.
Return to top
5. How we keep your personal data secure
We use appropriate technical and organisational measures to protect your personal data. These measures are designed to provide a level of security appropriate to the risk of processing, and include strict access management, encryption of personal data in transit using HTTPS. We deploy antivirus and advanced malware protection solutions on our servers and our web site is secured by a Web Application Firewall (WAF). To ensure data resilience and availability, we maintain backup and recovery procedures, alongside other industry-standard security controls designed to prevent unauthorised access, disclosure, alteration, or loss of personal data. Furthermore, we conduct regular penetration testing to proactively identify and mitigate potential vulnerabilities.
Return to top
6. International data transfers
In some cases, where your personal data is transferred to another Limak company or third parties, it is processed outside the UK. Data protection laws in the recipients’ countries are different and, in some cases, may not be as protective as the UK law.
Specifically, our Website servers are located in Turkiye, and Limak group companies to which we transfer your data are based in countries listed in section 3 above. Our third-party service providers and Partners operate in Turkiye or UK. This means that your personal data will be processed in these countries.
Where we transfer your personal data to countries or organisations which have been formally recognised as providing an adequate level of protection for personal data, we rely on the relevant “adequacy regulations" from the Secretary of State in the UK (, and “adequacy decisions” from the European Commission). We transfer name, last name, email address, date of birth, country of studies, subject of studies and year of studies in reliance on the Secretary of State’s adequacy regulations for the EU and for transfers to other countries which are not subject to an adequacy regulation, we will rely on the UK Addendum to European Commission’s Standard Contractual Clauses (EU SCCs) as issued on 4 June 2021 (Module 1 for controller to controller transfers) and appropriate safeguards to ensure that your personal data will remain protected in accordance with this Privacy Notice and applicable laws.
Return to top
7. Data retention
We retain your personal data where we have an ongoing legitimate need to do so, related to our management of the GEG Programme, or our compliance with legal obligations. The specific retention periods depend on the nature of the data, why we process it and, where relevant, the nature of the legal requirement. For example, we will normally retain your data for (3) years after your graduation, so that we can provide you with the relevant employment opportunities but would retain your data for longer than the usual retention period if there was an ongoing complaint, litigation or regulatory matter.
When we have no ongoing legitimate need or legal reason to process your personal data, we will either securely delete or anonymise it or, if this is temporarily stored in back-up archives, we will isolate it from any further processing until deletion is possible.
Return to top
8. Your data protection rights
Individuals located in the UK (and EEA) have the following data protection rights. To exercise any of them see specific instructions below or contact us using the contact details provided under the “How to contact us” heading below.
- You may access, correct, update or request deletion of your personal data.
- You can also object to processing of your personal data, or ask us to restrict its processing.
- If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time by using the contact details provided under the “How to contact us” heading below. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on other lawful basis.
- You have the right to complain to us by using the contact details provided under the “How to contact us” heading below.
- You also have the right to complain to a supervisory authority about our collection and use of your personal data. For more information, please contact the relevant supervisory authority (for the UK see contact details here, and for supervisory authorities in Europe, here).
We respond to all data subject requests in accordance with applicable data protection laws.
Return to top
9. Updates to this Privacy Notice
We may update this Privacy Notice from time to time in response to changing legal, regulatory, technical or organisational developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
Return to top
10. How to contact us
If you have any questions or concerns about our use of your personal data, please contact us using the following details: unitedkingdom@globalengineergirls.com. You may also write to us at 106 Great Portland Street (2nd Floor), London, England, W1W 6PF.