Conceptboard (test system)

DSGVO compliant online whiteboard

Conceptboard is an online whiteboard specifically designed for digital collaboration and compliant with the requirements of the General Data Protection Regulation (GDPR).

The system will be tested and evaluated as an "eLearning experiment" until the end of 2024. At the same time, we are looking for a comparable open source alternative.

If you would like to participate in this experiment, please contact us.

Privacy policy

on the usage, collection and processing of personal data when using "Conceptboard Cloud Service" as a communication platform with the account "Bauhaus-Universität Testsystem".

1. The purpose of data processing

To implement forms of virtual collaboration (e.g., digital whiteboard) to secure online teaching, digital continuing education formats, workshops, research, and administrative management activities at Bauhaus-Universitat Weimar.

2. The name and address of who is responsible

The processing of your personal data is regulated by
Bauhaus University Weimar
represented by the President
Geschwister-Scholl-Straße 8, 99423 Weimar, Germany
Telephone: +49 (0) 36 43/58 11 10

Contact person:
University Development
Stepan Boldt
Amalienstrasse 13, 99423 Weimar, Germany
Phone: +49 (0) 36 43/58 12 57  |  E-Mail: stepan.boldt[at]

3. Kontaktangaben der Datenschutzbeauftragten


If you have any questions concerning the collection and analysis of your user data, or need assistance with freezing accounts or deleting data, please contact our data protection representative:

Chancellor's Office
Belvederer Allee 6
99423 Weimar

phone: +49 (0) 36 43/58 12 22
e-mail: datenschutz[at]

4. Order processing

To implement forms of virtual collaboration, to secure online teaching, digital training formats, workshops, research and administrative management activities, the application:

"Conceptboard Premium"
of the company
Digital Republic Media Group GmbH
Mansfelder Straße 56, 06108 Halle (Saale)
is used.

For the use of this service, there is a contract for data processing on behalf with the service provider in accordance with Art. 28 DS-GVO.

5. Personal data processing

Be aware that when using Conceptboard, the following data is processed by the person responsible and by the service provider Digital Republic Media Group GmbH:

  • Contact data when using a user account (first name, last name, e-mail address),
  • Contact data when using via the browser as a "guest" (first name, last name),
  • Metadata of the internet connections,
  • Other information voluntarily provided individually by me and the other participants in the course of use, such as
    • uploaded documents, comments
    • Chat content or history.

For more information about Conceptboard's privacy policy, please read the company's privacy policy:

6. Legal basis of the data processing

  • As a legal basis for the processing of student data:Art. 6 para. 1 lit. e i.V.m. Abs. 3 DS-GVO i. V.m. &1 Abs. 1Satz 1Nr. 1ThürHG.
  • As a legal basis for the processing of employee data: Art. 6 para. I lit. e i.V.m. Abs. 3 DS-GVO i. V.m. § Section 27 (1) ThürDSG, Section 79 ThürBG.
  • As a legal basis for the processing of data external speakers and participants: Art. 6 para. 1, lit. a) DSGVO ("consent" with "declaration of consent").

7. Deletion

If the data in the provided "Conceptboard" account is not required in the following year, it will be deleted by the responsible team members at the end of the following semester of that calendar year. This excludes content stored for exhibition and documentation purposes, as well as content used for recurring formats. These will be deleted no later than 10 years after creation.

8. Revocation and further data subject rights

Consent can be revoked at any time and without disadvantages towards the responsible person (see no. 2). The lawfulness of the processing until the revocation remains unaffected.

The user has the right to receive information about any of their personal data that is stored in accordance with Art. 15 DSGVO and/or to have incorrectly stored personal data corrected in accordance with Art. 16 DSGVO.

The user also has the right to erasure (Art. 17 DSGVO) or to the restriction of processing (Art. 18 DSGVO).
The user has the right to lodge a complaint with the supervisory authority if they believe that the processing of their personal data violates the provisions of data protection law (Art. 77 DSGVO).