Basically you'll use the html sitemap for your visitors. The reason for adding no follow to the html sitemap and the other pages is that you would like the link juice not going to pages you have no intention for ranking (being high up in the SERPs).
For the search engine robots you'll need a sitemap.xml file. So in the optimal situation you need two sitemaps. Hope this helps!