Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
FastTony is a Polish Facebook and Instagram advertising platform that automates the creation, optimisation and reporting of Meta Ads campaigns for SMEs and agencies. It deploys the Meta Pixel and Conversions API on advertiser websites, which means GDPR compliance focuses on Meta tracking consent, EU US data transfers and joint controllership with Meta. FastTony itself is EU based, but the data flows it generates with Meta require careful consent management.
FastTony is a Polish advertising platform that simplifies the management of Facebook and Instagram campaigns. It automates ad creation, audience targeting, A/B testing and reporting on top of the Meta Marketing API. FastTony is widely used by Polish, German and Spanish SMEs and agencies and supports lead forms, dynamic product ads and Conversions API integration.
FastTony itself stores campaign settings, creative assets, performance metrics and the advertiser''s Meta access tokens on EU infrastructure. The pixel and CAPI integrations it deploys on advertiser websites collect visitor IPs, browser fingerprints, page views, button clicks, add to cart, purchase and lead events, then forward them to Meta.
The Meta Pixel and CAPI flow trigger Article 5(3) ePrivacy and require prior, granular consent. CNIL and other EU authorities have issued multiple fines for unlawful Meta Pixel deployment. The advertiser is also a joint controller with Meta under Article 26 GDPR for the audience and measurement processing, which must be reflected in the privacy policy.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Pixel and CAPI events are received by Meta in the United States. Since 2023 these transfers can rely on the EU US Data Privacy Framework as long as Meta remains certified. If certification lapses, SCCs and a Transfer Impact Assessment are required. FastTony''s own data remains in Poland.
Block the Meta Pixel and CAPI calls until granular consent for advertising is obtained, sign DPAs with FastTony and the Meta joint controller addendum, list FastTony and Meta in your privacy policy as separate and joint controllers, run a DPIA covering custom audience and lookalike processing, and verify Meta''s ongoing certification under the EU US DPF.
Websites using FastTony must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended because FastTony enables systematic tracking of website visitors via the Meta Pixel, builds custom audiences and uses lookalike modelling. The Meta joint controllership and the EU US transfer increase the risk profile under Article 35 GDPR.
Sample consent text
We use FastTony to manage our Facebook and Instagram advertising. FastTony deploys the Meta Pixel and Conversions API on this site. With your consent, your visit and conversion events are shared with Meta in the United States to measure campaign performance and build advertising audiences. You can withdraw consent at any time.
Third-party domains contacted
fasttony.comapp.fasttony.comconnect.facebook.netgraph.facebook.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| fasttony_session | first_party | session | Maintains the advertiser login session on the FastTony dashboard |
| csrf_token | first_party | session | Protects FastTony dashboard forms against cross site request forgery |
| _fbp | first_party | 90 days | Meta Pixel browser identifier deployed by FastTony on advertiser sites for ad attribution |
| _fbc | first_party | 90 days | Meta click identifier read by FastTony deployed Pixel and Conversions API for click deduplication |
FastTony places tracking cookies for advertising — comply with GDPR using FlowConsent.
FastTony itself sets a session cookie and a CSRF cookie on its own dashboard. On advertiser sites, the Meta Pixel sets _fbp (first party, 90 days) and reads the _fbc cookie to deduplicate clicks. The Conversions API works server side but typically uses _fbp values for matching.
Yes. The Meta Pixel and Conversions API are advertising trackers under Article 5(3) ePrivacy and require granular, prior opt in consent. FastTony's own dashboard cookies, used by the advertiser to log in, can rely on strict necessity.
Consent for the advertising tracking driven by FastTony on behalf of the advertiser. Contract performance for FastTony to operate the dashboard for paying customers. Legitimate interest may apply to FastTony's own service analytics with a documented LIA.
FastTony stores its own data in the EU. The Meta Pixel and Conversions API integrations transfer events to Meta in the United States under the EU US Data Privacy Framework. Verify that Meta is currently certified and rely on SCCs as a fallback.
A DPIA is recommended because FastTony enables systematic tracking, custom audiences and lookalike modelling on top of Meta's infrastructure. The DPIA should cover the Meta joint controllership, the Pixel and CAPI flow and the EU US transfer.
Block the Pixel and CAPI calls until granular advertising consent is obtained, configure the FastTony tag manager output to respect consent state, sign DPAs and the joint controller addendum, name FastTony and Meta in your privacy policy and run a DPIA.
For pure Facebook ads management: Madgicx, AdEspresso (Hootsuite), Smartly.io. For advertisers wanting fewer Meta tracking obligations, server side tag management with consent gating and aggregated reporting is a privacy friendlier route.
List the FastTony dashboard cookies if visitors interact with FastTony directly. On advertiser sites, list the Meta Pixel cookies (_fbp, _fbc), the data shared with Meta, the joint controllership statement and a link to Meta's data policy.