Under the Tyrolean Crisis and Disaster Management Act 2025 (TKKMG 2025), the provincial capital, Innsbruck, is responsible for preparing for and carrying out measures to prevent and combat disasters (disaster management) within its own area of jurisdiction.
The Mayor, as the municipal head of operations, bears ultimate responsibility for ensuring that measures to protect the population are implemented swiftly and effectively, and that appropriate preparations are made in advance.
The increasing frequency and intensity of flooding events pose a significant threat to infrastructure, particularly to bridges, which serve as key transport links. One of the greatest dangers posed by flooding is log jams – blockages caused by accumulated floating debris that impede the flow of water. Such log jams can lead to massive damage to bridge structures and surrounding areas by diverting the flow and drastically raising water levels.
The bridges in the provincial capital, in particular, are of vital importance not only as transport routes but also for critical infrastructure such as electricity, water and sewage supply.
Video-based monitoring of predefined critical points along the rivers Inn and Sill makes it significantly easier for the municipal emergency response team to gather information in the event of a flood scenario. The integration of live footage into the situational picture enables fact-based decisions to be made more quickly and a swifter response to changes in the risk situation. Furthermore, video-based surveillance provides important technical support for rescue services during rescue and assistance operations (e.g. a person in the water).
Site plan
Legal basis and purpose of data processing
The installation of cameras on bridge structures and along the course of the river is intended to support the fulfilment of key public safety and disaster management tasks. The aim is, in particular, the early detection of log jams to prevent flooding, as well as to assist emergency services in locating people in bodies of water. The measure is therefore primarily aimed directly at protecting high-priority legal interests, namely life, health, significant property and critical infrastructure.
The system was designed with the early and ongoing involvement of the Data Protection Officer of the City of Innsbruck. In addition, a data protection impact assessment was carried out, during which potential risks were identified and effectively addressed through appropriate technical and organisational measures. Against this background, the fundamental admissibility under data protection law is no longer in question; rather, a general legal assessment is to be carried out, with particular regard to the principle of proportionality.
The legal basis for the data processing is Article 6(1)(e) of the GDPR, according to which the processing of personal data is permitted provided that it is necessary for the performance of a task carried out in the public interest. This condition is met in the present case, as the public sector is not only entitled but also obliged, within the scope of its duty of care, to take appropriate measures to avert danger. In addition – particularly for specific operational situations – Article 6(1)(d) of the GDPR (protection of vital interests) will also be relevant. In addition, state-specific provisions must be taken into account, in particular the provisions of the TKKMG 2025 and the regulations issued for its implementation, which expressly support the use of technical systems for risk prevention and the protection of critical infrastructure. Of particular note in this context are the provisions of Section 9(1) and (2)(d) of the TKKMG 2025 on protection and emergency plans, Section 18(2)(f) leg. cit. regarding the implementation of necessary measures to effectively avert or combat disasters; and Section 25 of the TKKMG concerning situational awareness management, with a focus on key public infrastructure facilities.
Measures to minimise data collection
To minimise the generation of data, the installed camera systems are deactivated by default. They are only activated in the event of a disaster or emergency, or for regular functional tests. Even when activated, live images are generated in accordance with DIN EN 62676-4 at such a low resolution (25px/m) that no personal data is produced. The storage of the generated images and recordings in higher resolution must be separately authorised and activated by the relevant authorised bodies.
Rights of data subjects
In accordance with the provisions of the General Data Protection Regulation (GDPR), users have the right to access personal data relating to them, to data portability, to the rectification or erasure of personal data, and to restrict or object to the processing of their personal data. There is no automated decision-making, including profiling. Users may exercise these rights in writing, providing proof of identity, via datenschutz@innsbruck.gv.at. Further information on requests for access can be found in the data protection notice of the City of Innsbruck.
Finally, users have the right to lodge a complaint with the Austrian Data Protection Authority (dsb@dsb.gv.at, www.dsb.gv.at).
The use, purpose, retention period and disclosure of personal data
All personal data is collected, processed and stored in accordance with the applicable data protection regulations, solely for the purpose of managing disasters and emergency scenarios.
Your data will be stored in a personalised form only for as long as is necessary for the purposes for which it is processed, or until the expiry of any guarantee, warranty, limitation periods and statutory retention periods, unless otherwise specified in this privacy policy.
Changes and updates to the privacy notice
As the technologies we use continue to evolve and new technical capabilities are introduced, it will be necessary to update this privacy policy on an ongoing basis to reflect current circumstances. Any changes relating to the technologies or services we use that are relevant to data protection law will be published on this page in good time.