Data Processing Responsible

The responsible for processing the data is Yoroi SRL

Via Giovanni Battista Martini, 6, Roma RM, 00198

VAT number 03407741200 - R.E.A. RM 1559639 - Fiscal Code 03407741200

in the figure of its Legal Representative.

Data Protection Officer

The data protection officer is:

Dott. Riccardo Corrado,

Piazza Sanguinetti 106, Cesena

051 0301005 -

External managers of data processing

Third-party companies may be nominated for targeted marketing campaigns. These companies will be required to provide legal guarantees for each campaign. This information will be stored at Yoroi and it will be possible to access the documentation upon request to the Yoroi DPO. Furthermore, Yoroi makes use of third parties for some of the data processing processes, appointed as external processors. Below you will find the service providers you use; this list will be updated by Yoroi when one of them changes:


  • MailChimp (newsletter/Early Warning)
  • Google (G-Suite)
  • FreshSales (CRM)
  • Slack (internal communication)
  • Trello (tasks)
  • Web application/Website:

  • Aruba S.P.A.(main website) Italia
    1. Google Analytics
  • Inasset S.r.l. (web application platform/cloud) Italia
  • In addition to the present subjects and for the purposes indicated, Yoroi does not disclose any kind of personal data to external subjects

    Where the data is processed

    The treatment will be carried out by Yoroi in Italy in the premises belonging to it. In case of use of third-party companies for any marketing campaigns, the data may be processed in the premises elected by the same in relation to the companions that will be carried out. The external managers of the processing will perform the subprocesses charged to them in the places indicated by the service supply contracts with Yoroi.

    The purpose of the treatment

    The data will be processed in order to provide:

    1. An always better browsing experience
    2. Traffic analysis
    3. Content that is better focused on users browsing the site
    4. Marketing campaigns is relevant
    5. Analysis of job requests
    6. Administer the cyberdefence service through the CSDC cloud platform.
    7. Administration of the Yomi Malware Hunter service to the public

    Types of treatment

    The treatments will be carried out mainly with electronic tools (paper ones are not excluded) and will be carried out by form data form, cookies (Google Analytics) and e-mail. Safety and organizational measures are prepared to mitigate possible risks of loss, tampering, changes and availability of data. The data collected by the Yomi service will be processed and disclosed to third parties for the sole purpose of providing the service. It is made except that the person who will use Yomi can register with the related forms and independently to other services offered by Yoroi (for example EW, marketing campaigns, etc ...). The data provided through the domain and related third-level domains will not be used for the dissemination of commercial content or for purposes other than those to which the services are assigned. For the Yomi Malware Hunter service, for reasons of access statistics to the site, it will not be possible to disable the Google Analytics tracking cookie.

    Duration of data retention

    The data will be retained for 14 months unless the data subject does not require otherwise, or it is not the EW newsletter, in which case it will be the subject to unsubscribe when it deems appropriate, or the data will be given to marketing companies for the duration limited to specific campaigns within a maximum of 14 months. The CSDC web application service data is stored for 6 months, but everything that does not refer to attacks on the client's business integrity is anonymized in the shortest time possible. Data for the Yomi service will be retained for 6 months.

    The Data

    The processed data:

    1. For what concerns Early Warning and marketing campaigns:
      1. Name
      2. Surname
      3. Company
      4. Telephone number
      5. Qualification
      6. Email address
      7. Note
    2. For the Yomi service will be asked:
      1. Name
      2. Surname
      3. Email address
      4. IP
      5. Country
    3. For what concerns the “Career” section: the résumé that will be spontaneously sent by the candidates
    4. Analytical Data from the Google Analytics traffic analysis
    5. For the CSDC Web application, data are defined from time to time with each individual customer with specific reserved agreements (DPA), depending on the service they require.

    The rights of the data subject

    The legislation guarantees the following rights to the interested party:

    1. Right of access
    2. Right of rectification
    3. Cancellation right
    4. Opposition right
    5. Data portability right
    6. Right not to be subjected to an automated decision-making process

    Yoroi guarantees these rights both in the consent phase of the interested party with the granularization of the acceptance of the treatments and in subsequent moments with the possibility of contacting the DPO. In relation to the right to be forgotten, the interested party may exercise it by sending an email, with the subject [RIGHT TO OBLE] and indicating the means by which you will be contacted for confirmation of cancellation, to the DPO. The manager, or a person delegated by him, after 10 working days from the request, will delete all data relating to the applicant without the possibility of restoration. The process ends with the sending of a communication informing Yoroi of the data being deleted by email to the interested party or in the way he has previously indicated in the cancellation request. Contact information will be deleted immediately after successful communication has been successfully completed.

    The Services and cookies we use

    We use cookies on our websites. Cookies are bits of data we store on the device you use to access our websites and services so we can recognise repeat visitors. Each cookie expires after a certain period of time, depending on what we use it for. We use cookies for several reasons. Below we list and describe the various cookies used on Yoroi's website.

    Google (G-Suite and Analytics)

    Used to collect and analyse information about how visitors use our site. We use Google Analytics to collect and compile reports that help us improve our services. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.


    Used to deliver early warnings