Terms of Use

Data classified as INTERNAL and RESTRICTED may be shared on Mural boards. However, sharing data classified as SECRET is prohibited.

For questions regarding information classification, please visit the following website or contact your Information Classification Caretaker (ICC). Guest users may approach the Bayer board owner for information on content classification.

A full license is required to create boards and facilitate meetings in Mural. Licenses are available upon request and subject to availability. Due to the limited number of licenses, strict license management measures are in place to ensure fair access for all Bayer employees. Full licenses expire after 60 days but may be extended. Licenses not used within 7 days of issuance may be revoked without warning. These rules and timelines are subject to change based on company requirements.

Each Mural board must have at least one designated owner. The board owner is responsible for managing the board's content, lifecycle, and permissions, and must comply with all applicable Bayer policies and laws regarding data protection.

If employees under legal hold contribute to a board, board owners must export the board to Teams / SharePoint / OneDrive after the meeting/workshop to ensure the contents can be captured by e-discovery.

Boards without an owner are considered orphaned and will be deleted after a maximum of 90 days.

All Bayer accounts will access the tool via single sign-on. Board creators become owners and are responsible for the permissions on their board. Sharing via public link is disabled. Sharing boards with the whole company is not allowed.

Third party guests may be invited to Mural boards, subject to the same security and data privacy rules as Bayer employees. Board owners are responsible for removing guest user access when no longer needed and for informing guest users about proper handling of Bayer data. Sharing Bayer data with external partners is only permitted if a contract and/or security agreement is in place. Board owners are accountable to comply with local labor laws when collaborating with external parties.

Mural is not a long-term storage or archiving solution. Board content that needs to be preserved must be exported and stored preferably on OneDrive, SharePoint, Teams. Boards will be automatically deleted without warning after 3 months of inactivity.

Board owners are responsible for ensuring the proper handling of personal identifiable information (PII) on their boards. Storing personal data on Mural boards should be avoided and sensitive personal information is strictly prohibited. Boards containing personal information beyond basic address book data must be deleted as soon as they are no longer needed.

You can find Mural's Privacy Policy here.

The Mural digital whiteboard (hereinafter "Mural") is provided by Bayer AG (hereinafter "Bayer", "we" or "us"). Further information can be found in our imprint. 

Unless otherwise indicated below, the legal basis for the handling of your personal data results from the fact that such handling is required to make available the functionalities of Mural as a collaboration platform (Art. 6 (I) (f) GDPR).

The following types of personal data are processed:

• Address book and login data: first name, last name, business email address, ip address, time stamp
• Technical information: browser, operating system, device, time stamp
• Activity information: login and board access events including time stamp

Data is deleted according to the following policy:

• Users without board affiliation after 30 days
• Users inactive for at least 12 months
• Boards that have been inactive (not been opened) for at least 3 months

The following contacts will be glad to assist you with any matters related to data privacy.

For any questions you may have with respect to data protection, please send us an email to data.privacy@bayer.com or contact our company data protection officer at the following address:

Group Data Protection Officer

Bayer AG

51368 Leverkusen

We may update this data privacy statement from time to time. Updates will be announced in HowITWorks and will take effect upon announcement. We recommend regularly checking HowITWorks for updates.

Date of privacy statement: 2024-05-30