Deletion or return of Controller Personal Data. Processor shall promptly and in any event within 60 (sixty) days of the date of cessation of provision of the Services to Controller involving the Processing of Controller Personal Data, delete, return, or anonymize all copies of such Controller Personal Data, provided however that Processor may retain Controller Personal Data, as permitted by applicable law.
Deletion or return of Controller Personal Data. 9.1. Subject to Section 0, Processor shall promptly and in any event within up to sixty (60) days of the date of cessation of any Services involving the Processing of Controller Personal Data (the "Cessation Date"), delete or pseudonymize all copies of those Controller Personal Data, except such copies as authorized including under this DPA or required to be retained in accordance with applicable law and/or regulation.
9.2. Subject to the Agreement, Processor may retain Controller Personal Data to the extent authorized or required by Applicable Laws, provided that Processor shall ensure the confidentiality of all such Controller Personal Data and shall ensure that it is only processed for such legal purpose(s).
9.3. Upon Controller’s prior written request, Processor shall provide written certification to Controller that it has complied with this Section 9.
Deletion or return of Controller Personal Data. 10.1 Subject to sections 10.2 and 10.3 Processor and each Processor Affiliate shall (and shall procure that each relevant Contracted Processor), after the date of cessation of any Services involving the Processing of Controller Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Controller Personal Data without undue delay.
10.2 Subject to section 10.3 prior to the Cessation Date as set out in section 10.1, Controller may in its absolute discretion by written notice to Processor require Processor and each Processor Affiliate to (a) return a complete copy of all Controller Personal Data to Controller by secure file transfer in such format as is reasonably agreed upon between Processor and Controller and the Processor shall procure the return of all copies by any relevant Contracted Processor of those Controller Personal Data.
10.3 Each Contracted Processor may retain Controller Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that any relevant Contracted Processor shall ensure the confidentiality of all such Controller Personal Data and shall, in accordance with Applicable Laws, take reasonable steps to ensure that such Controller Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Law requiring its storage and for no other purpose.
10.4 After the Cessation Date, upon written request by Controller, Processor shall provide written certification to Controller that it and each relevant Contracted Processor has fully complied with this section 10 within 90 days of such written request.
Deletion or return of Controller Personal Data. 9.1 Processor shall promptly and in any event within 90 (ninety) calendar days of the earlier of: (i) cessation of processing of Personal Data by Processor; or (ii) termination of the Principal Agreement, at the choice of the Controller either:
9.1.1 return a complete copy of all Personal Data to the Controller by secure file transfer in such format as notified by the Controller to the Processor and securely wipe all other copies of Personal Data processed by Processor or any Authorised Subprocessor; or
9.1.2 securely wipe all copies of Personal Data processed by Processor or any Authorised Subprocessor, and in each case provide written certification to the Controller that it has complied fully with this section 9.
Deletion or return of Controller Personal Data. 8.1 The Processor corrects, deletes or blocks the Personal Data if the Controller instructs so. The destruction of data carriers and other materials in accordance with Data Protection Laws shall be undertaken by the Processor on the basis of an individual order by the Controller, unless already agreed in the Main Agreement.
8.2 Personal Data, data carriers and all other materials shall either be surrendered or deleted at the Controller's request at the end of this Addendum. This does not apply to Personal Data and other materials for which statutory provisions or contractual agreements between the Parties require retention or to documentation which serves as proof for the Processors compliance with the contractual agreements between the Parties and Data Protection Laws. If additional costs are incurred by the Processor as a result of deviating specifications for the surrender or deletion, these shall be borne by the Controller.
8.3 Irrespective of other provisions on deletion, the Personal Data in the backup systems and files will be deleted in accordance with the regular deletion cycle of these backups.
Deletion or return of Controller Personal Data. 9.1 Upon request made by the Customer within thirty (30) days of the earlier of: (i) cessation of processing of Personal Data by the Supplier; or (ii) termination of the Main Agreement, the Supplier shall return all Personal Data to the Customer. After such thirty (30) day period, the Supplier shall securely dispose of Personal Data and delete all copies of it (except to the extent that any applicable law requires the Supplier to retain a copy of such Personal Data) and Customer acknowledges that the Supplier will have no obligation to maintain or provide such Personal Data.
Deletion or return of Controller Personal Data. 9.1. Either upon the Controller’s request or when the Processor no longer needs to process Controller Personal Data to fulfil the purposes for processing identified in this Addendum (whichever is earlier), the Processor shall:
9.1.1. cease all use of Controller Personal Data; and
9.1.2. upon receipt of the Controller’s written request, return Controller Personal Data to the Controller and, to the extent allowed by Applicable Data Protection Law, delete all copies of Controller Personal Data.
9.2. Upon the Controller’s written request, the Processor shall provide written certification that it has complied with this clause.
Deletion or return of Controller Personal Data.
9.1 Processor shall promptly and in any event within 90 (ninety) calendar days of the earlier of: (i) cessation of processing of Personal Data by Processor; or (ii) termination of the Principal Agreement, at the choice of the Controller either:
9.1.1 return a complete copy of all Personal Data to the Controller by secure file transfer in such format as notified by the Controller to the Processor and securely wipe all other copies of Personal Data processed by Processor or any Authorised Subprocessor; or
9.1.2 securely wipe all copies of Personal Data processed by Processor or any Authorised Subprocessor,
Deletion or return of Controller Personal Data. Data Processor shall promptly and in any event within the date of cessation of the services involving the Processing of Controller Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Personal Data. Data Processor and each Subprocessor may only retain Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Data Processor shall ensure the confidentiality of all such Personal Data and shall ensure that such Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose.
Deletion or return of Controller Personal Data. 10.1 Subject to sections 10.2 and 10.3 Processor and each Processor Affiliate shall promptly and in any event within 90 business days of the date of cessation of any Services involving the Processing of Controller Personal Data (the "Cessation Date"), delete (for avoidance of any doubt, “delete ” here means to remove or obliterate Personal Data such that it cannot be recovered or reconstructed) and procure the deletion of all copies of those Controller Personal Data.
10.2 Subject to section 10.3, Controller may in its absolute discretion by written notice to Processor within 90 business days of the Cessation Date require Processor and each Processor Affiliate to (a) return a complete copy of all Controller Personal Data to Controller by secure file transfer in such format as is reasonably notified by Controller to Processor; and (b) delete and procure the deletion of all other copies of Controller Personal Data Processed by any Contracted Processor. Processor and each Processor Affiliate shall comply with any such written request within 90 business days of the Cessation Date.
10.3 Each Contracted Processor may retain Controller Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Processor and each Processor Affiliate shall ensure the confidentiality of all such Controller Personal Data and shall ensure that such Controller Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose.
10.4 Processor shall provide written certification to Controller that it and each Processor Affiliate has fully complied with this section 10 within 90 business days of the Cessation Date.
