...
h. Return or Disposal. The Parties agree that upon termination of the Services in so far as they relate to Personal Data, Processor shall, and shall require all Subprocessors to, at the choice of the Controller, return all Personal Data and copies thereof to the Controller, or securely destroy all Personal Data and certify to the Controller that they have done so, unless prohibited by applicable law.
...