This paper proposes a General Data Protection Regulation (GDPR)-compliant Internet of Things (IoT) Recommender (IoTRec) system, developed in the framework of H2020 EU-KR WISE-IoT (Worldwide Interoperability for Semantic IoT) project, which provides the recommendations of parking spots and routes while protecting users' privacy. It provides recommendations by exploiting the IoT technology (parking and traffic sensors). The IoTRec provides four-fold functions. Firstly, it helps the user to find a free parking spot based on different metrics (such as the nearest or nearest trusted parking spot). Secondly, it recommends a route (the least crowded or the shortest route) leading to the recommended parking spot from the user's current location. Thirdly, it provides the real-time provision of expected availability of parking areas (comprised of parking spots organized into groups) in a user-friendly manner. Finally, it provides a GDPR-compliant implementation for operating in a privacy-aware environment. The IoTRec is integrated into the smart parking use case of the WISE-IoT project and is evaluated by the citizens of Santander, Spain through a prototype, but it can be applied to any IoT-enabled locality. The evaluation results show the citizen's satisfaction with the quality, functionalities, ease of use and reliability of the recommendations/services offered by the IoTRec.